CVE-2023-49954/CVE-2023-49954.github.io

PoC

SQL Injection in 3CX CRM Integration

view exploit source poc_in_githubauthor CVE-2023-49954published 2023-12-14catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-49954US	critical9.8	2.24% (83rd)	Exploit	2023-12-25
The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.