CVE-2023-5045

Critical

Published: 12/10/2023(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2023-5045 in Biltay Technology Kayisi has an improper neutralization of special elements used in SQL commands, allowing for SQL Injection and command execution through SQL Injection.

Risk Assessment

An attacker can exploit this vulnerability to gain unauthorized access to the database and execute arbitrary commands on the server, posing a serious threat to the organization's data security.

Recommendation

It is recommended to update Kayisi software to version 1286 or later to mitigate this vulnerability and implement additional security measures against SQL Injection attacks.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Kayisi allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Kayisi: before 1286.