Softomi CVEs and Security Vulnerabilities

CVE-2023-6122

Reflected XSS in Softomi E-commerce Software

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Gelişmiş C2C Pazaryeri Yazılımı allows Reflected XSS. This issue affects Softomi Gelişmiş C2C Pazaryeri Yazılımı: before 12122023.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Softomi

Products

Advanced C2c Marketplace Software

CVE-2023-6145

SQLi in Softomi E-commerce Software

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection. This issue affects Softomi Advanced C2C Marketplace Software: before 12122023.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed