CVE-2023-4231

CVE-2023-4231 affects Cevik Informatics Online Payment System (versions prior to 4.09). The root cause is improper neutralization of specific elements used in SQL commands, enabling an SQL Injection. CVSSv3.1 metrics (NETWORK, LOW ATTACK COMPLEXITY, NONE PRIVILEGES, UI NONE) yield a CRITICAL 9.8 ...

CVE-2023-4231 SQLi in Cevik Informatics' Online Payment System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection. This issue affects Online Payment System: before 4.09...

CVE-2023-4231 SQLi in Cevik Informatics' Online Payment System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Cevik Informatics Online Payment System allows SQL Injection. This issue affects Online Payment System: before 4.09...

Cevik Informatics Online Payment System SQL Injection Vulnerability

Cevik Informatics Online Payment System is an online payment system from Cevik Informatics. A SQL injection vulnerability exists in Cevik Informatics Online Payment System versions prior to 4.09, which stems from incorrect neutralization of specific elements used by the system...

CVE-2023-3632 Hard-coded Cryptographic Key in Kunduz - Homework Helper App

Use of Hard-coded Cryptographic Key vulnerability in Sifir Bes Education and Informatics Kunduz - Homework Helper App allows Authentication Abuse, Authentication Bypass. This issue affects Kunduz - Homework Helper App: before 6.2.3...

CVE-2023-3632

CVE-2023-3632 affects the Kunduz - Homework Helper App by Sifir Bes Education and Informatics Kunduz. Root cause described in multiple sources as a hard-coded cryptographic key leading to authentication abuse/bypass . Affected versions are listed as prior to 6.2.3. The CVSS-based metrics indicate...

CVE-2023-3632 Hard-coded Cryptographic Key in Kunduz - Homework Helper App

Use of Hard-coded Cryptographic Key vulnerability in Sifir Bes Education and Informatics Kunduz - Homework Helper App allows Authentication Abuse, Authentication Bypass. This issue affects Kunduz - Homework Helper App: before 6.2.3...

CVE-2023-2046

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yontem Informatics Vehicle Tracking System allows SQL Injection.This issue affects Vehicle Tracking System: before 8...

CVE-2023-2046

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yontem Informatics Vehicle Tracking System allows SQL Injection. This issue affects Vehicle Tracking System: before 8...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yontem Informatics Vehicle Tracking System allows SQL Injection.This issue affects Vehicle Tracking System: before 8...

CVE-2023-2046 SQLi in Yontem Vehicle TrackingSsystem

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yontem Informatics Vehicle Tracking System allows SQL Injection. This issue affects Vehicle Tracking System: before 8...

CVE-2023-2046

Summary: CVE-2023-2046 affects Yontem Informatics Vehicle Tracking System prior to version 8 due to an SQL Injection vulnerability caused by improper neutralization of special elements in SQL commands. This can lead to unauthorized data access or modification as outlined by multiple sources. Affe...

CVE-2023-2046 SQLi in Yontem Vehicle TrackingSsystem

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Yontem Informatics Vehicle Tracking System allows SQL Injection. This issue affects Vehicle Tracking System: before 8...

PT-2023-17442 · Yontem Informatics · Yontem Informatics Vehicle Tracking System

Name of the Vulnerable Software and Affected Versions: Yontem Informatics Vehicle Tracking System versions prior to 8 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attack...

CVE-2023-1728

Unrestricted Upload of File with Dangerous Type vulnerability in Fernus Informatics LMS allows OS Command Injection, Server Side Include SSI Injection.This issue affects LMS: before 23.04.03...

Design/Logic Flaw

Unrestricted Upload of File with Dangerous Type vulnerability in Fernus Informatics LMS allows OS Command Injection, Server Side Include SSI Injection.This issue affects LMS: before 23.04.03...

CVE-2023-1728

CVE-2023-1728 describes an Unrestricted Upload of File with Dangerous Type in Fernus Informatics LMS, enabling OS Command Injection and Server-Side Include (SSI) Injection. Affected: Fernus Informatics LMS versions prior to 23.04.03. Root cause: unrestricted file uploads allow dangerous types to ...

Fernus Informatics LMS 代码问题漏洞

Fernus Informatics LMS is a Learning Management System from Fernus, Turkey. A code issue vulnerability exists in Fernus Informatics LMS versions prior to 23.04.03, which stems from the presence of an Unlimited Upload of Dangerous Types of Files vulnerability. An attacker exploiting this...

PT-2023-17196

Name of the Vulnerable Software and Affected Versions Fernus Informatics LMS versions prior to 23.04.03 Description The issue allows OS Command Injection and Server Side Include SSI Injection due to an Unrestricted Upload of File with Dangerous Type vulnerability. This vulnerability can be...

CVE-2022-3693

Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal. This issue affects FileOrbis File Management System: from unspecified before 10.6.3...