CVE-2023-24219

CRITICAL CVSS: 9.8 Published: 2023-02-17 Modified: 2026-06-17

Description

LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/UserMapper.xml.

Affected Platforms

Luckyframe Luckyframeweb

Weakness Type

CWE-89, CWE-89

References