Paper/Archive/CVE-2023-6441

CVE-2023-6441

UNI-PA University Marketing & Computer Internet Trade Inc. University Information System — SQLi in UNI-PA's University Information System

EPSS 0.7%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 53.7.537 × 2010.7 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023.

Affected

ProductAffectedFixed inSource

University Information System< 12.12.202312.12.2023CNA

university_information_system< 12.12.202312.12.2023CISA-ADP

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-24-0102 refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0102