CVE-2023-6145

Published Dec 21, 2023

Last updated 9 months ago

CVSS critical 9.8

Overview

Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection.This issue affects Softomi Advanced C2C Marketplace Software: before 12122023.
Source: iletisim@usom.gov.tr
NVD status: Modified

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

iletisim@usom.gov.tr: CWE-89

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:softomi:advanced_c2c_marketplace_software:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EA3F76C0-04DF-41F2-AFAA-9C5C9134BF76",
            "versionEndExcluding": "12122023"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References