CVE-2023-6436

SQLi in Ekol Bilisim Website Template

CVSS 9.8 CRITICALEPSS 0.5%CWE-89

Vexday Risk Score

28Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 9.8EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

02 Jan 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ekol Informatics Website Template allows SQL Injection. This issue affects Website Template: through 20231215.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Ekol Informatics · Website Template

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0001 https://www.usom.gov.tr/bildirim/tr-24-0001