CVE-2023-5045

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Kayisi allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Kayisi: before 1286.

Score

CVSS 3.1 9.8 Critical

Status

Modified - iletisim@usom.gov.tr

Published

2023-10-12

Last modified

2026-05-21

Weaknesses

CWE-89

Affected products

• Kayisi (Biltay)
• Kayisi (Biltay Technology)

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0580
• https://www.usom.gov.tr/bildirim/tr-23-0580