Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00706·Published 2023-07-13·Fixed in 02.01-a51CWE-89