by Kastro
Paper/Archive/CVE-2023-4671

CVE-2023-4671

Talent Software ECOP — SQLi in Talent Soft's ECOP

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 51.0.510 × 2010.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Talent Software ECOP allows Command Line Execution through SQL Injection. This issue affects ECOP: before 32255.

Affected

ProductAffectedFixed inSource
ECOP< 3225532255CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refusom.gov.tr/bildirim/tr-23-0737refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0737