Lucene search

[email protected]CVE-2023-6436

HistoryJan 02, 2024 - 1:15 p.m.

CVE-2023-6436

2024-01-0213:15:08

CWE-89

[email protected]

web.nvd.nist.gov

cve-2023-6436

sql injection

ekol informatics

website template

nvd

vulnerability

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.8%

JSON

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Ekol Informatics Website Template allows SQL Injection.This issue affects Website Template: through 20231215.

Affected configurations

NVD

Node

ekolbilisimweb_sablonu_yazilimiRange≤20231215

CPENameOperatorVersion
ekolbilisim:web_sablonu_yazilimiekolbilisim web sablonu yazilimile20231215

CPE	Name	Operator	Version
ekolbilisim:web_sablonu_yazilimi	ekolbilisim web sablonu yazilimi	le	20231215

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Website Template",
    "vendor": "Ekol Informatics",
    "versions": [
      {
        "lessThanOrEqual": "20231215",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.usom.gov.tr/bildirim/tr-24-0001

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.8%

JSON

Related for CVE-2023-6436

prion1 cvelist1 nvd1