CVE-2023-4034

Critical

Published: 05/09/2023(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A SQL Injection vulnerability in Digita Information Technology's Smartrise Document Management System due to improper neutralization of special elements used in SQL commands. This issue affects versions before Hvl-2.0.

Risk Assessment

An attacker could exploit this vulnerability to perform SQL Injection attacks, potentially leading to unauthorized access or modification of data.

Recommendation

It is recommended to update the Smartrise Document Management System to version Hvl-2.0 or later to mitigate this vulnerability.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Digita Information Technology Smartrise Document Management System allows SQL Injection. This issue affects Smartrise Document Management System: before Hvl-2.0.