CVEvulnerability
CVE-2023-4034
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2023-09-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-89
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Digita Information Technology Smartrise Document Management System allows SQL Injection.
This issue affects Smartrise Document Management System: before Hvl-2.0.
Affected configurations
• digitatek smartrise document management system (< hvl-2.0)
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0494 siberguvenlik.gov.tr
- https://www.usom.gov.tr/bildirim/tr-23-0494 Third Party Advisory
- https://www.usom.gov.tr/bildirim/tr-23-0494 Third Party Advisory