critical9.8
CVE-2023-33367
A SQL injection vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing unauthenticated attackers to write PHP files on the server's root dire…
Impact
A SQL injection vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing unauthenticated attackers to write PHP files on the server's root directory, resulting in remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Assaabloy | Control Id Idsecure | through 4.7.26.0 |