Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in As Koc Energy Web Report System allows SQL Injection.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.0062·Published 2023-03-23·Fixed in 23.03.10CWE-89
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in As Koc Energy Web Report System allows Reflected XSS.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00357·Published 2023-03-23·Fixed in 23.03.10CWE-79