CVE-2023-6145

SQLi in Softomi E-commerce Software

CVSS 9.8 CRITICALEPSS 0.5%CWE-89

Vexday Risk Score

28Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 9.8EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

21 dez 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection. This issue affects Softomi Advanced C2C Marketplace Software: before 12122023.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

İstanbul Soft Informatics and Consultancy Limited Company · Softomi Advanced C2C Marketplace Software

Referências

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0724 https://www.usom.gov.tr/bildirim/tr-23-0724