CVE-2023-2907

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1850%

EPSS Percentile24.43th

Published2023年6月19日

Last Modified2026年5月22日

Vulnerability Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Marksoft allows SQL Injection. This issue affects Marksoft: through Mobile:v.7.1.7 ; Login:1.4 ; API:20230605.

Affected Platforms (CPE)

📦

Marksoft

<= 7.1.7

References & Advisories

🔗 https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0363

🔗 https://www.usom.gov.tr/bildirim/tr-23-0363

相關漏洞威脅

CVE-2023-30459.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tise Technology Parking Web ...

CVE-2023-15479.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Elra Parkmatik allows SQL In...

CVE-2023-28529.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Softmed SelfPatron allows SQ...

CVE-2023-29579.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lisa Software Florist Site a...