CVE-2023-2750

CVE-2023-2750 describes an improper neutralization of special elements used in SQL commands, allowing SQL Injection in the Cityboss E-municipality system. This issue affects E-municipality versions before 6.05.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the disclosure of sensitive information or data modification. This poses a serious threat to the integrity and confidentiality of the organization's data.

It is recommended to upgrade the E-municipality system to version 6.05 or later to mitigate this vulnerability. Additionally, conducting a security audit of the application is advisable to identify and remediate other potential vulnerabilities.