CVE-2023-34635

Wifi Soft Unibox Administration 3.0 and 3.1 is vulnerable to SQL Injection. The vulnerability occurs because of not validating or sanitizing the user input in the username field of the login page.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

3.54% chance of exploitation in the next 30 days, 89th percentile

Published

2023-07-31

Updated

2024-10-22

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/173669/Wifi-Soft-Unibox-Administration-3.0-3.1-SQL-I…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51610

References

• CVE Record
• NVD entry