TI-2023-05650 Aliases CVE-2023-6145 GHSA-8qwh-2gcf-fj4g

SQLi in Softomi E-commerce Software

MEDIUM 43CWE-89Published 2023-12-21 · Updated 2026-05-20

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: SQL injection
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-89.

Summary

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in İstanbul Soft Informatics and Consultancy Limited Company Softomi Advanced C2C Marketplace Software allows SQL Injection. This issue affects Softomi Advanced C2C Marketplace Software: before 12122023.

Why it matters now

EPSS 0.00518 44th percentileScored 2026-11-07

Fix Fixed Softomi Advanced C2C Marketplace Software (İstanbul Soft Informatics and Consultancy Limited Company): 12122023

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
İstanbul Soft Informatics and Consultancy Limited Company	Softomi Advanced C2C Marketplace Software	before 12122023	12122023	Patch available	CNA

Softomi Advanced C2C Marketplace Software Vendorİstanbul Soft Informatics and Consultancy Limited Company Affected before 12122023 Fixed in 12122023 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:softomi:advanced_c2c_marketplace_software::::::::	before 12122023	Vulnerable	Softomi

cpe:2.3:a:softomi:advanced_c2c_marketplace_software:*:*:*:*:*:*:*:* Versions before 12122023 Vulnerable ·Softomi

Remediation

Fix · CNA Softomi Advanced C2C Marketplace Software (İstanbul Soft Informatics and Consultancy Limited Company) Fixed in 12122023

Timeline

2026-10-02 Threatist record created from CVE-2023-6145
2026-10-03 Alias added: GHSA-8qwh-2gcf-fj4g

References

Advisory 1

https://www.usom.gov.tr/bildirim/tr-23-0724

Other 1

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0724

TI-2023-05627 Reflected XSS in Softomi E-commerce Software CVSS 3.1MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences