high7.5
CVE-2023-35851
SUNNET WMPro portal's FAQ function has insufficient validation for user input.
Impact
SUNNET WMPro portal's FAQ function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to obtain sensitive information via a database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun.Net | Wmpro | Version 5.0 |