CVE-2023-48372: Itpison Omicard Edm

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

ITPison OMICARD EDM 's SMS-related function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify and delete database.

Affected products

• Itpison Omicard Edm: version 6.0.1.5 only

Published 2023-12-15. Last modified 2026-06-17.