CVE-2023-39807

Critical · CVSS 9.8

N.V.K.INTER CO., LTD. (NVK) iBSG — SQL Injection

CVSS: 9.8; nvd
EPSS: 0.52%; 40th pct
KEV: No
Class: other; CWE-89

Description

N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection vulnerability via the a_passwd parameter at /portal/user-register.php.

Search profile — drives PoC discovery

Symbols a_passwd/portal/user-register.php

Keywords CVE-2023-39807iBSGiBSG v3.5SQL injectiona_passwduser-register.phpNVK iBSGnvkinter

Versions: v3.5

Ranked PoCs (1) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

fkie-cad/nvd-json-data-feeds needs review

trickest

★ 0

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

https://github.com/maride
https://sec.maride.cc/posts/ibsg/
http://ibsg.com
http://nvkinter.com

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T18:30:39.000Z