CVE-2023-6145
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection.
This issue affects Softomi Advanced C2C Marketplace Software: before 12122023.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| İstanbul Soft Informatics and Consultancy Limited Company | Softomi Advanced C2C Marketplace Software | 0 < 12122023 | affected |
Weaknesses
- CWE-89: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
ADP Enrichment
CVE Program Container
Additional References
References
- https://www.usom.gov.tr/bildirim/tr-23-0724
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0724
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.