CVE-2023-4737

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hedef Tracking Admin Panel allows SQL Injection.

This issue affects Admin Panel: before 1.2.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-473706.5The leakage of channel access token in bluetrick Line 13.6.1 allows remote attackers to send malicious notifications to victims.CVE-2023-473726.5The leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers to send malicious notifications to victims.CVE-2023-473736.5The leakage of channel access token in DRAGON FAMILY Line 13.6.1 allows remote attackers to send malicious notifications to victims.CVE-2023-473795.4Microweber CMS version 2.0.1 is vulnerable to stored Cross Site Scripting (XSS) via the profile picture file upload functionality.CVE-2023-47387.8Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.CVE-2023-473806.1Admidio v4.2.12 and below is vulnerable to Cross Site Scripting (XSS).CVE-2023-473845.5MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gf_isom_add_chapter at /isomedia/isom_CVE-2023-47399.8A vulnerability, which was classified as critical, has been found in Byzoro Smart S85F Management Platform up to 20230820. Affected by this CVE-2023-473907.5Headscale through 0.22.3 writes bearer tokens to info-level logs.CVE-2023-473925.3An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the carts of other users via sending a crafted addCVE-2023-473935.3An access control issue in Mercedes me IOS APP v1.34.0 and below allows attackers to view the maintenance orders of other users and access sCVE-2023-473979.8WeBid <=1.2.2 is vulnerable to code injection via admin/categoriestrans.php.