CVE-2023-1050

CRITICAL

As Koc Energy Web Report System < 23.03.10 - SQL Injection

Title source: llm

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in As Koc Energy Web Report System allows SQL Injection. This issue affects Web Report System: before 23.03.10.

References (2)

Core 2

Core References

Third Party Advisory government-resource broken-link

https://www.usom.gov.tr/bildirim/tr-23-0166

Government Resource government-resource

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0166

Scores

CVSS v3 9.8

EPSS 0.0062

EPSS Percentile 45.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-89

Status published

Products (2)

As Koc Energy/Web Report System < 23.03.10

askoc/web_report_system < 23.03.10

Published Mar 23, 2023

Tracked Since Feb 18, 2026