CVE-2023-5046
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection.
This issue affects Procost: before 1390.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Biltay Technology | Procost | 0 < 1390 | affected |
Weaknesses
- CWE-89: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
ADP Enrichment
CVE Program Container
Additional References
References
- https://www.usom.gov.tr/bildirim/tr-23-0581
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0581
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.