CVE-2023-41566

OA EKP v16 was discovered to contain an arbitrary download vulnerability via the component /ui/sys_ui_extend/sysUiExtend.do. This vulnerability allows attackers to obtain the password of the background administrator and further obtain database permissions.
CVSS

No CVSS.

Configurations

No configuration.

History

17 Jul 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-07-17 16:15

Updated : 2025-07-24 21:15


NVD link : CVE-2023-41566

Mitre link : CVE-2023-41566


JSON object : View

Products Affected

No product.

CWE

No CWE.