CVE-2023-6145

Critical

Published: 21/12/2023(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2023-6145 affects Softomi Advanced C2C Marketplace software and involves improper neutralization of special elements used in SQL commands, allowing for SQL Injection attacks.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update the Softomi Advanced C2C Marketplace software to a version after 12122023 to mitigate this vulnerability.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection. This issue affects Softomi Advanced C2C Marketplace Software: before 12122023.