← All advisories

Critical severity9.8NVD Advisory· Published Jul 13, 2023· Updated Jun 17, 2026

CVE-2023-35070

CVE-2023-35070

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VegaGroup Web Collection allows SQL Injection.

This issue affects Web Collection: before 31197.

Affected products

3

VegaGroup/Web Collection3 versions
cpe:2.3:a:vegagroup:web_collection:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:vegagroup:web_collection:*:*:*:*:*:*:*:*range: <31197
- (no CPE)range: <31197
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

2

www.usom.gov.tr/bildirim/tr-23-0406nvdThird Party Advisory
siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0406nvd

News mentions

0

No linked articles in our index yet.