Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injecti…
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.00518·Published 2023-12-21·Fixed in 12122023CWE-89
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Gelişmiş C2C Pazaryeri Yazılımı allows Reflected XSS…
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00414·Published 2023-12-21·Fixed in 12122023CWE-79