Cyber Resilience

CVE-2023-54340

HighPublic PoC

Published: 13 January 2026

Published
13 January 2026
Modified
15 April 2026
KEV Added
Patch
CVSS Score v4 8.8 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS Score 0.0030 21.1th percentile
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2023-54340 is a high-severity SQL Injection (CWE-89) vulnerability. Its CVSS base score is 8.8 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 21.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 RA-5 (Vulnerability Monitoring and Scanning) and SI-10 (Information Input Validation).

Deeper analysis

CVE-2023-54340 is a SQL injection vulnerability (CWE-89) affecting WorkOrder CMS version 0.1.0. The flaw resides in the login functionality, where the username and password parameters are vulnerable to manipulation, enabling attackers to inject malicious SQL queries such as 'OR 1=1' or stacked queries. Published on 2026-01-13, it carries a CVSS v3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N), indicating high confidentiality impact with low attack complexity.

Unauthenticated remote attackers can exploit this vulnerability to bypass login authentication without user interaction. Successful exploitation allows extraction of sensitive database information or execution of administrative commands, potentially leading to unauthorized data access or control over the application.

Advisories and related resources, including the WorkOrder CMS GitHub repository (https://github.com/romzes13/WorkOrderCMS), an Exploit-DB proof-of-concept (https://www.exploit-db.com/exploits/51038), and a VulnCheck advisory (https://www.vulncheck.com/advisories/workorder-cms-sql-injection), document the issue and exploitation details for security practitioners to review potential mitigations such as input sanitization or upgrades.

OWASP Top 10 for Web (2025)

EU & UK References

Vulnerability details

WorkOrder CMS 0.1.0 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login by manipulating username and password parameters. Attackers can inject malicious SQL queries using techniques like OR '1'='1' and stacked queries to access database information or…

more

execute administrative commands.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
T1213.006 Databases Collection
Adversaries may leverage databases to mine valuable information.
Why these techniques?

T1190 directly matches exploitation of a public-facing web application via SQL injection. T1213.006 is facilitated by the ability to extract sensitive database information post-authentication bypass.

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2018-25199Shared CWE-89
CVE-2026-27179Shared CWE-89
CVE-2025-0308Shared CWE-89
CVE-2019-25581Shared CWE-89
CVE-2026-27885Shared CWE-89
CVE-2019-25479Shared CWE-89
CVE-2026-1476Shared CWE-89
CVE-2019-25526Shared CWE-89
CVE-2025-69365Shared CWE-89
CVE-2019-25573Shared CWE-89

Affected Assets

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

prevent

SI-10 mandates validation of information inputs such as username and password parameters, directly preventing SQL injection exploitation like OR '1'='1' or stacked queries.

prevent

SI-2 requires identification, reporting, and correction of flaws, ensuring timely remediation of the specific SQL injection vulnerability in WorkOrder CMS 0.1.0 login functionality.

detect

RA-5 requires vulnerability scanning that would detect SQL injection flaws in login forms, enabling proactive mitigation before exploitation.

References