Paper/Archive/CVE-2023-5806

CVE-2023-5806

Mergen Software Quality Management System — SQLi in Mergen Soft Quality Management System

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 45.1.451 × 209.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mergen Software Quality Management System allows SQL Injection. This issue affects Quality Management System: before v1.2.

Affected

ProductAffectedFixed inSource

Quality Management System< v1.2v1.2CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-24-0040 refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0040