cve/2023/CVE-2023-20110.md

### [CVE-2023-20110](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-20110)
![](https://img.shields.io/static/v1?label=Product&message=Cisco%20Smart%20Software%20Manager%20On-Prem%20&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-89&color=brighgreen)

### Description

A vulnerability in the web-based management interface of Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability exists because the web-based management interface inadequately validates user input. An attacker could exploit this vulnerability by authenticating to the application as a low-privileged user and sending crafted SQL queries to an affected system. A successful exploit could allow the attacker to read sensitive data on the underlying database.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/CVEDB/awesome-cve-repo
- https://github.com/abrahim7112/Vulnerability-checking-program-for-Android
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/redfr0g/CVE-2023-20110