Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection.
This issue affects Procost: before 1390.
References
| Link | Resource |
|---|---|
| https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0581 | |
| https://www.usom.gov.tr/bildirim/tr-23-0581 | Third Party Advisory |
| https://www.usom.gov.tr/bildirim/tr-23-0581 | Third Party Advisory |
Configurations
History
21 May 2026, 09:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| Summary | (en) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Procost: before 1390. |
21 Nov 2024, 08:40
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.usom.gov.tr/bildirim/tr-23-0581 - Third Party Advisory |
17 Oct 2023, 18:14
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.usom.gov.tr/bildirim/tr-23-0581 - Third Party Advisory | |
| First Time |
Biltay procost
Biltay |
|
| CPE | cpe:2.3:a:biltay:procost:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
12 Oct 2023, 12:59
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-12 12:15
Updated : 2026-05-21 09:16
NVD link : CVE-2023-5046
Mitre link : CVE-2023-5046
CVE.ORG link : CVE-2023-5046
JSON object : View
Products Affected
biltay
- procost
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')