CVE-2023-1863

Summary

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection.

This issue affects Water Metering Software: before 23.04.06.

Affected Software

Weaknesses

• CWE-89: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

ADP Enrichment

CVE Program Container

Additional References

• https://www.usom.gov.tr/bildirim/tr-23-0225

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://www.usom.gov.tr/bildirim/tr-23-0225
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0225

• ←Previous
• Next→