CVE-2023-6145 - OpenCVE

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection.This issue affects Softomi Advanced C2C Marketplace Software: before 12122023.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Softomi	Advanced C2c Marketplace Software

Configuration 1 [-]

cpe:2.3:a:softomi:advanced_c2c_marketplace_software:*:*:*:*:*:*:*:*

References

Link	Resource
https://www.usom.gov.tr/bildirim/tr-23-0724	Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: TR-CERT

Published: 2023-12-21T13:58:18.662Z

Updated: 2023-12-21T13:58:39.028Z

Reserved: 2023-11-15T07:41:51.049Z

Link: CVE-2023-6145

JSON object: View

NVD Information

Status : Modified

Published: 2023-12-21T14:15:09.430

Modified: 2024-02-29T01:42:33.440

Link: CVE-2023-6145

JSON object: View

Redhat Information

No data.

CWE

CWE-89

{"dataType": "CVE_RECORD", "dataVersion": "5.0", "cveMetadata": {"cveId": "CVE-2023-6145", "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "state": "PUBLISHED", "assignerShortName": "TR-CERT", "dateReserved": "2023-11-15T07:41:51.049Z", "datePublished": "2023-12-21T13:58:18.662Z", "dateUpdated": "2023-12-21T13:58:39.028Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Softomi Advanced C2C Marketplace Software", "vendor": "\u0130stanbul Soft Informatics and Consultancy Limited Company", "versions": [{"lessThan": "12122023", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": " Furkan Ali Soysal"}], "datePublic": "2023-12-21T14:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in \u0130stanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection.<p>This issue affects Softomi Advanced C2C Marketplace Software: before 12122023.</p>"}], "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in \u0130stanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection.This issue affects Softomi Advanced C2C Marketplace Software: before 12122023.\n\n"}], "impacts": [{"capecId": "CAPEC-66", "descriptions": [{"lang": "en", "value": "CAPEC-66 SQL Injection"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21", "shortName": "TR-CERT", "dateUpdated": "2023-12-21T13:58:39.028Z"}, "references": [{"url": "https://www.usom.gov.tr/bildirim/tr-23-0724"}], "source": {"advisory": "TR-23-0724", "defect": ["TR-23-0724"], "discovery": "UNKNOWN"}, "title": "SQLi in Softomi E-commerce Software", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}}}