CVE-2023-5155

CRITICAL

Utarit Information Technologies SoliPay <5.0.8 - SQL Injection

Title source: llm

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies SoliPay Mobile App allows SQL Injection. This issue affects SoliPay Mobile App: before 5.0.8.

References (2)

Core 2

Core References

Third Party Advisory government-resource broken-link

https://www.usom.gov.tr/bildirim/tr-24-0104

Government Resource government-resource

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-0104

Scores

CVSS v3 9.8

EPSS 0.0052

EPSS Percentile 40.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-89

Status published

Products (2)

utarit/solipay_mobile < 5.0.8

Utarit Information Technologies/SoliPay Mobile App < 5.0.8

Published Feb 15, 2024

Tracked Since Feb 18, 2026