CVE-2023-43014 (published 2023-09-28T21:04:11.974Z)
Asset Management System v1.0 is vulnerable to

an Authenticated SQL Injection vulnerability

on the 'first_name' and 'last_name' parameters

of user.php page, allowing an authenticated

attacker to dump all the contents of the database

contents.




Affected products: Vendor: Asset Management System
Product: Asset Management System
Versions: 1.0