Unrated severityNVD Advisory· Published Jun 1, 2023· Updated Jan 9, 2025
CVE-2023-29154
CVE-2023-29154
Description
SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may execute an arbitrary SQL command via specially crafted input to the query setting page.
Affected products
1- Range: versions prior to 3.5.3
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3News mentions
0No linked articles in our index yet.