by Kastro
Paper/Archive/CVE-2023-35064

CVE-2023-35064

Satos Satos Mobile — SQLi in Satos Mobile

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 54.3.543 × 2010.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Satos Satos Mobile allows SQL Injection through SOAP Parameter Tampering. This issue affects Satos Mobile: before 20230607.

Affected

ProductAffectedFixed inSource
Satos Mobile< 2023060720230607CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-23-0346refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0346refhttps://www.usom.gov.tr/bildirim/tr-23-0346