VULNERABILITY INTELLIGENCE

CVE-2023-48395

CVSS score6.5 MEDIUM

EPSS probability0.71%

CISA KEVNot currently listed

Published2023-12-15

Last modified2026-06-17

Description

Kaifa Technology WebITR is an online attendance system, it has insufficient validation for user input within a special function. A remote attacker with regular user privilege can exploit this vulnerability to inject arbitrary SQL commands to read database.