exploitDog

CVE-2023-1091

Опубликовано: 10 мар. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alpata Licensed Warehousing Automation System allows Command Line Execution through SQL Injection.This issue affects Licensed Warehousing Automation System: through 2023.1.01.

Ссылки

https://www.usom.gov.tr/bildirim/tr-23-0139
Third Party Advisory
https://www.usom.gov.tr/bildirim/tr-23-0139
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:alpatateknoloji:licensed_warehousing_automation_system:*:*:*:*:*:*:*:*

Версия до 2023.1.01 (включая)

EPSS

Процентиль: 29%

0.00104

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

CWE-89

Связанные уязвимости

GHSA-6qfv-6rhf-5wv5

CVSS3: 9.8

github

почти 3 года назад

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alpata Licensed Warehousing Automation System allows Command Line Execution through SQL Injection.This issue affects Licensed Warehousing Automation System: through 2023.1.01.

EPSS

Процентиль: 29%

0.00104

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

CWE-89