CVE-2024-7735

Sept. 23, 2024, 12:15 p.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Exnet Informatics Software Ferry Reservation System

  • before 240805-002

Source

iletisim@usom.gov.tr

Tags

CVE-2024-7735 details

Published : Sept. 23, 2024, 12:15 p.m.
Last Modified : Sept. 23, 2024, 12:15 p.m.

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Exnet Informatics Software Ferry Reservation System allows SQL Injection.This issue affects Ferry Reservation System: before 240805-002.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.

References

URL Source
https://www.usom.gov.tr/bildirim/tr-24-1518 iletisim@usom.gov.tr
This website uses the NVD API, but is not approved or certified by it.