CVE-2023-5806

Critical

Published: 18/01/2024(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2023-5806 describes an improper neutralization of special elements used in SQL commands, allowing SQL Injection in the Mergen Software Quality Management System. This issue affects versions prior to v1.2.

Risk Assessment

An attacker could exploit this vulnerability to gain control over the database, potentially leading to the exposure or manipulation of sensitive data. This poses a serious threat to the integrity and confidentiality of information within the organization.

Recommendation

It is recommended to update the Mergen Software Quality Management System to version 1.2 or later to mitigate this vulnerability. Additionally, conducting a security audit of the application is advisable to identify and remediate other potential vulnerabilities.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mergen Software Quality Management System allows SQL Injection. This issue affects Quality Management System: before v1.2.