CVE-2023-1765

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akbim Computer Panon allows SQL Injection.

This issue affects Panon: before 1.0.2.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Apr 3, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-17666.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Akbim Computer Panon allows Reflected CVE-2023-17675.4The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is toCVE-2023-17685.3Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the syCVE-2023-17697.5A vulnerability, which was classified as problematic, was found in SourceCodester Grade Point Average GPA Calculator 1.0. Affected is an unkCVE-2023-17709.8A vulnerability has been found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as critical. Affected by this vulneraCVE-2023-17716.1A vulnerability was found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as problematic. Affected by this issue is CVE-2023-17724.8A vulnerability was found in DataGear up to 4.5.1. It has been classified as problematic. This affects an unknown part of the component DiagCVE-2023-17739.8A vulnerability was found in Rockoa 2.3.2. It has been declared as critical. This vulnerability affects unknown code of the file webmainConfCVE-2023-17745.4When processing an email invite to a private channel on a team, Mattermost fails to validate the inviter's permission to that channel, allowCVE-2023-17756.5When running in a High Availability configuration, Mattermost fails to sanitize some of the user_updated and post_deleted events broadcast tCVE-2023-17765.4Boards in Mattermost allows an attacker to upload a malicious SVG image file as an attachment to a card and share it using a direct link to CVE-2023-17775.3Mattermost allows an attacker to request a preview of an existing message when creating a new message via the createPost API call, disclosin
CVE-2023-1765: Critical severity, CVSS 9.8 | Vulnix