by Kastro
Paper/Archive/CVE-2023-6145

CVE-2023-6145

İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software — SQLi in Softomi E-commerce Software

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 44.1.441 × 208.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection. This issue affects Softomi Advanced C2C Marketplace Software: before 12122023.

Affected

ProductAffectedFixed inSource
Softomi Advanced C2C Marketplace Software< 1212202312122023CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refusom.gov.tr/bildirim/tr-23-0724refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0724