Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-4674

SQLi in Yazteks E-Commerce Software

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yaztek Software Technologies and Computer Systems E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: through 20231229.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Yaztek Software Technologies and Computer Systems E-Commerce Software

Default version status: unaffected

  • 0 to ≤ 20231229affected

References