CVE-2023-4674

Not scored yetLast modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yaztek Software Technologies and Computer Systems E-Commerce Software allows SQL Injection.

This issue affects E-Commerce Software: through 20231229. 

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

No CVSS score has been published yet.

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
Yaztek Software Technologies and Computer SystemsE-Commerce Software<= 20231229

References

Timeline

Published
Dec 29, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-467409.8CubeFS is an open-source cloud-native file storage system. Prior to version 3.3.1, CubeFS used an insecure random string generator to generaCVE-2023-467419.8CubeFS is an open-source cloud-native file storage system. A vulnerability was found in CubeFS prior to version 3.3.1 that could allow usersCVE-2023-467426.5CubeFS is an open-source cloud-native file storage system. CubeFS prior to version 3.3.1 was found to leak users secret keys and access keysCVE-2023-467434.3application-collabora is an integration of Collabora Online in XWiki. As part of the application use cases, depending on the rights that a uCVE-2023-467445.4Squidex is an open source headless CMS and content management hub. In affected versions a stored Cross-Site Scripting (XSS) vulnerability enCVE-2023-467457.5LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring which includes support for a wide range of network hardware and operCVE-2023-467464.3PostHog provides open-source product analytics, session recording, feature flagging and A/B testing that you can self-host. A server-side reCVE-2023-467479.8Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through CVE-2023-467488.8An authenticated SQL injection vulnerability exists in the BIG-IP Configuration utility which may allow an authenticated attacker with netCVE-2023-467496.5Apache Shiro before 1.13.0 or 2.0.0-alpha-4, may be susceptible to a path traversal attack that results in an authentication bypass when useCVE-2023-46759.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GM Information Technologies MDO allowsCVE-2023-467506.1URL Redirection to Untrusted Site ('Open Redirect') vulnerability when "form" authentication is used in Apache Shiro. Mitigation: Update to
CVE-2023-4674: Unscored | Vulnix