CyberSec.Space Logo
返回 CVE 浏览器

CVE-2023-1547

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1500%
EPSS Percentile8.47th
Published2023年7月13日
Last Modified2026年6月1日

Vulnerability Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection. This issue affects Parkmatik: before 02.01-a51.

Affected Platforms (CPE)

📦
Elra

Parkmatik

< 02.01-a51

References & Advisories

🔗 https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0404
🔗 https://www.usom.gov.tr/bildirim/tr-23-0404
🔗 https://www.usom.gov.tr/bildirim/tr-23-0404

相关漏洞威胁

CVE-2023-08399.8

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in ProMIS Process Co. InSCADA allows Account Footp...

CVE-2023-09399.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NTN Information Technologies...

CVE-2023-11149.8

Missing Authorization vulnerability in Eskom e-Belediye allows Information Elicitation. This issue affects e-Belediye: from 1.0.0...

CVE-2023-09799.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MedData MedDataPACS allows S...