Security Advisory

CVE-2023-33367

9.8
CRITICAL

Vulnerability Description

A SQL injection vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing unauthenticated attackers to write PHP files on the server's root directory, resulting in remote code execution.
Published Date August 5, 2023
Official Source NIST NVD Advisory