CVE-2023-2750

SQLi in Cityboss Software's E-municipality

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cityboss E-municipality allows SQL Injection. This issue affects E-municipality: before 6.05.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Cityboss

Products

E-municipality

CVE-2023-2851

SQLi in Ceppatron

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AGT Tech Ceppatron allows Command Line Execution through SQL Injection, SQL Injection. This issue affects all versions of the sofware also EOS when CVE-ID assigned.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Agtteknik

Products

Ceppatron

CVE-2023-2852

SQLi in SoftMed's SelfPatron

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Softmed SelfPatron allows SQL Injection. This issue affects SelfPatron : before 2.0.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Softmedyazilim

Products

Selfpatron

CVE-2023-2889

SQLi in Veon Computer's Service Tracking Software

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Veon Computer Service Tracking Software allows SQL Injection. This issue affects Service Tracking Software: before crm 2.0.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Veom

Products

Service Tracking

CVE-2023-2907

SQLi in Marksoft

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Marksoft allows SQL Injection. This issue affects Marksoft: through Mobile:v.7.1.7 ; Login:1.4 ; API:20230605.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Marksoft

Products

Marksoft

CVE-2023-2957

SQLi in Lisa Softwares Florist Site

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lisa Software Florist Site allows SQL Injection. This issue affects Florist Site: before 3.0.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Lisayazilim

Products

Florist Site

CVE-2023-2963

SQLi in Oliva Expertise

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oliva Expertise Oliva Expertise EKS allows SQL Injection. This issue affects Oliva Expertise EKS: before 1.2.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Olivaekspertiz

Products

Oliva Ekspertiz

CVE-2023-3000

SQLi in Erikoglu Technology's ErMon

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Erikoglu Technology ErMon allows Command Line Execution through SQL Injection, Authentication Bypass. This issue affects ErMon: before 230602.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Erikogluteknoloji

Products

Energy Monitoring

CVE-2023-3045

SQLi in Tise Technology's Parking Web Report

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tise Technology Parking Web Report allows SQL Injection. This issue affects Parking Web Report: before 2.1.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Tise

Products

Parking Web Report

CVE-2023-3046

SQLi in Biltay Technlogys Scienta

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Scienta allows SQL Injection. This issue affects Scienta: before 20230630.1953.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Biltay

Products

Scienta

CVE-2023-3047

SQLi in TMT's Lockcell

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMT Lockcell allows SQL Injection. This issue affects Lockcell: before 15.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed

Vendors

Tmtmakine

Products

Lockcell Lockcell Firmware

CVE-2023-35068

SQLi in BMAs Personnel Tracking System

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BMA Personnel Tracking System allows SQL Injection. This issue affects Personnel Tracking System: before 20230904.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Bma

Products

Personnel Tracking System

CVE-2023-35066

SQLi in Infodrom Sofwares E-Invoice Approval System

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infodrom Software E-Invoice Approval System allows SQL Injection. This issue affects E-Invoice Approval System: before v.20230701.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Infodrom

Products

E-invoice Approval System

CVE-2023-35065

SQLi in Osofts Paint Production Management

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Osoft Paint Production Management allows SQL Injection. This issue affects Paint Production Management: before 2.1.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Osoft

Products

Dyeing - Printing - Finishing Production Management

CVE-2023-35064

SQLi in Satos Mobile

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Satos Satos Mobile allows SQL Injection through SOAP Parameter Tampering. This issue affects Satos Mobile: before 20230607.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Satos

Products

Satos Mobile

CVE-2023-35072

SQLi in Coyav Travels Proagent

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Coyav Travel Proagent allows SQL Injection. This issue affects Proagent: before 20230904 .

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Coyavtravel

Products

Proagent

CVE-2023-35071

SQLi in MRV Tech's Logging Administration Panel

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MRV Tech Logging Administration Panel allows SQL Injection. This issue affects Logging Administration Panel: before 20230915 .

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Mrv

Products

Logging Administration Panel

CVE-2023-35070

SQL in VegaGroup Web Collection

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VegaGroup Web Collection allows SQL Injection. This issue affects Web Collection: before 31197.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Vegagroup

Products

Web Collection

CVE-2023-3376

SQLi in Digital Strategys Zekiweb

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Digital Strategy Zekiweb allows SQL Injection. This issue affects Zekiweb: before 2.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Dijital

Products

Zekiweb

CVE-2023-3377

SQLi in Veribilim's Veribase

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Veribilim Software Computer Veribase allows SQL Injection. This issue affects Veribase: through 20231123.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Veribase

Products

Veribase