CVE Catalog

CVE-2023-4530

Critical
Published: Translated: NVD NIST

Summary

CVE-2023-4530 vulnerability affects the Turna Advertising Administration Panel, which is susceptible to SQL Injection before version 1.1. Improper neutralization of special elements used in SQL commands allows attackers to inject malicious SQL code.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, jeopardizing the confidentiality and integrity of the organization's data. Attackers could gain access to sensitive information or modify data.

Recommendation

It is recommended to update the Turna Advertising Administration Panel to version 1.1 or later to mitigate this vulnerability. Additionally, implementing protections against SQL Injection, such as using parameters in SQL queries, is advisable.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Turna Advertising Administration Panel allows SQL Injection. This issue affects Advertising Administration Panel: before 1.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS