cve/2023/CVE-2023-33592.md

CVE-2023-33592

Description

Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=system_info/contact_information.

POC

Reference

• http://packetstormsecurity.com/files/173331/Lost-And-Found-Information-System-1.0-SQL-Injection.html

Github

• https://github.com/0XRedRose/CVE-2023-33592
• https://github.com/Acous7icwav3/CVE-2023-33592
• https://github.com/ChineseOldboy/CVE-2023-33592
• https://github.com/FuckingHack3r/CVE-2023-33592
• https://github.com/nomi-sec/PoC-in-GitHub