← Database

CVE-2023-22324

MEDIUM CVSS: 6.5 Published: 2023-01-30 Modified: 2026-06-17

Description

SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained.

Affected Platforms

Contec Conprosys Hmi System

Weakness Type

CWE-89, CWE-89

References