CVE-2023-4737

SQLi in Hedef Trackings Admin Panel

CVSS 9.8 CRITICALEPSS 0.8%CWE-89

Vexday Risk Score

28Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 9.8EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

27 Sep 2023Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hedef Tracking Admin Panel allows SQL Injection. This issue affects Admin Panel: before 1.2.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Hedef Tracking · Admin Panel

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0559 https://www.usom.gov.tr/bildirim/tr-23-0559