CVE-2023-2045

9.8 criticalEPSS 0.6%

Critical (9.8) in ipekyolunet software auto damage tracking software. EPSS 0.6% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ipekyolu Software Auto Damage Tracking Software allows SQL Injection. This issue affects Auto Damage Tracking Software: before 4.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2023-05-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ipekyolunet:software_auto_damage_tracking_software

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0289
https://www.usom.gov.tr/bildirim/tr-23-0289
https://www.usom.gov.tr/bildirim/tr-23-0289

Check your stack JSON