CVEvulnerability
CVE-2023-1091
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-03-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-89
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alpata Licensed Warehousing Automation System allows Command Line Execution through SQL Injection.
This issue affects Licensed Warehousing Automation System: through 2023.1.01.
Affected configurations
• alpatateknoloji licensed warehousing automation system (<= 2023.1.01)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0139 siberguvenlik.gov.tr
- https://www.usom.gov.tr/bildirim/tr-23-0139 Third Party Advisory
- https://www.usom.gov.tr/bildirim/tr-23-0139 Third Party Advisory