Medium severity6.5NVD Advisory· Published Dec 15, 2023· Updated Jun 17, 2026
CVE-2023-48395
CVE-2023-48395
Description
Kaifa Technology WebITR is an online attendance system, it has insufficient validation for user input within a special function. A remote attacker with regular user privilege can exploit this vulnerability to inject arbitrary SQL commands to read database.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: 2_1_0_19
Patches
Vulnerability mechanics
References
1- www.twcert.org.tw/tw/cp-132-7625-a0b9c-1.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.