CVE-2023-3386

CRITICAL

a2 Camera Trap Tracking System <3.1905 - SQL Injection

Title source: llm

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in a2 Camera Trap Tracking System allows SQL Injection. This issue affects Camera Trap Tracking System: before 3.1905.

References (2)

Core 2

Core References

Third Party Advisory government-resource broken-link

https://www.usom.gov.tr/bildirim/tr-23-0444

Government Resource government-resource

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0444

Scores

CVSS v3 9.8

EPSS 0.0052

EPSS Percentile 40.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-89

Status published

Products (2)

a2/Camera Trap Tracking System < 3.1905

a2technology/camera_trap_tracking_system < 3.1905

Published Aug 08, 2023

Tracked Since Feb 18, 2026