CVE-2023-7081

Critical

Published: 15/02/2024(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The POSTAHSİL Online Payment System has an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. This issue affects versions of the system before 14.02.2024.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, posing a serious threat to user data security and system integrity.

Recommendation

It is recommended to update the POSTAHSİL Online Payment System to a version after 14.02.2024 to mitigate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSTAHSİL Online Payment System allows SQL Injection. This issue affects Online Payment System: before 14.02.2024.