CVE-2023-4833 CRITICAL

CVE-2023-4833: SQLi in Besttem's Network Marketing Software

Vendor Besttem

Product Network Marketing Software

Weakness CWE-89 · SQLi

Published September 15, 2023

Last update May 21, 2026

View on NVD All CVEs

CVSS base score

9.8/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Besttem Network Marketing Software allows SQL Injection. This issue affects Network Marketing Software: before 1.0.2309.6.

Key dates

02Disclosure timeline

September 15, 2023 CVE published

May 21, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-4833 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2026-9544 Shenzhen Sixun Software Sixun Shanghui Group Business Management System PayConfig sql injection CVE-2026-25544 Payload has an SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite Adapters CVE-2025-4362 itsourcecode Gym Management System ajax.php sql injection CVE-2023-2698 SourceCodester Lost and Found Information System GET Parameter sql injection CVE-2018-25372 MedDream PACS Server Premium 6.7.1.1 SQL Injection via email