CVE-2023-47261

Published: 2023-12-14T17:15Z

Last Modified: 2024-11-21T08:30Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Dokmee ECM 7.4.6 allows remote code execution because the response to a GettingStarted/SaveSQLConnectionAsync /#/gettingstarted request contains a connection string for privileged SQL Server database access, and xp_cmdshell can be enabled. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt