CyberSec.Space Logo
Back to CVE Browser

CVE-2023-1547

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1500%
EPSS Percentile8.47th
PublishedJul 13, 2023
Last ModifiedJun 1, 2026

Vulnerability Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection. This issue affects Parkmatik: before 02.01-a51.

Affected Platforms (CPE)

📦
Elra

Parkmatik

< 02.01-a51

References & Advisories

🔗 https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0404
🔗 https://www.usom.gov.tr/bildirim/tr-23-0404
🔗 https://www.usom.gov.tr/bildirim/tr-23-0404

Related Vulnerabilities

CVE-2023-27139.8

Authorization Bypass Through User-Controlled Key vulnerability in "Rental Module" developed by third-party for Ideasoft's E-comme...

CVE-2023-343629.8

MOVEit Transfer SQL Injection vulnerability allows unauthenticated attackers to gain unauthorized access to MOVEit Transfer's data...

CVE-2023-20649.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Minova Technology eTrace all...

CVE-2023-350649.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Satos Satos Mobile allows SQ...