CVE-2023-47261 | BDVDB-2026-219360 Detail

Description#

Dokmee ECM 7.4.6 allows remote code execution because the response to a GettingStarted/SaveSQLConnectionAsync /#/gettingstarted request contains a connection string for privileged SQL Server database access, and xp_cmdshell can be enabled.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.dokmee.com/Support-Learn/Updates-Change-Log
https://h3x0s3.github.io/CVE2023~47261/

Exploit#

No public exploit known

History#

Version 12023-12-14Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.