CVE-2023-2046

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yontem Informatics Vehicle Tracking System allows SQL Injection.

This issue affects Vehicle Tracking System: before 8.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
Yontem Informatics	Vehicle Tracking System	< 8
yontemizleme	vehicle_tracking_system	< 8

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0389
https://www.usom.gov.tr/bildirim/tr-23-0389Third Party Advisory
https://www.usom.gov.tr/bildirim/tr-23-0389Third Party Advisory

Timeline

Published: Jul 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-20478.8A vulnerability was found in Campcodes Advanced Online Voting System 1.0 and classified as critical. Affected by this issue is some unknown CVE-2023-20488.8A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affects an unknown part o CVE-2023-20498.8A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been declared as critical. This vulnerability affects unkno CVE-2023-20508.8A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been rated as critical. This issue affects some unknown pro CVE-2023-205072.3An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data in CVE-2023-205085.0Improper access control in the ASP could allow a privileged attacker to perform an out-of-bounds write to a memory location not controlled b CVE-2023-205095.2An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, CVE-2023-20518.8A vulnerability classified as critical has been found in Campcodes Advanced Online Voting System 1.0. Affected is an unknown function of the CVE-2023-205106.0An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to SRAM, potentially re CVE-2023-205116.4Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potent CVE-2023-205121.9A hardcoded AES key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug informa CVE-2023-205133.3An insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize a malicious VF (virtualization function) t