Critical severity9.8NVD Advisory· Published Oct 12, 2023· Updated Jun 17, 2026

CVE-2023-5046

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection.

This issue affects Procost: before 1390.

Affected products

Biltay Technology/Procostllm-fuzzy2 versions
<1390+ 1 more
- (no CPE)range: <1390
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.usom.gov.tr/bildirim/tr-23-0581nvdThird Party Advisory
siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0581nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000