Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-4835: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management So...

CVE-2023-4835 · published 3 years ago

Summary

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CF Software Oil Management Software allows SQL Injection.

This issue affects Oil Management Software: before 20230912 .

What to do

Update petroleum_management_software_application_project petroleum_management_software_application to version 20230912 or later.

Affected software

Vendor	Product	Affected versions
petroleum_management_software_application_project	petroleum_management_software_application	< 20230912 `cpe:2.3:a:petroleum_management_software_application_project:petroleum_management_software_application::::::::`

Original advisory text

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CF Software Oil Management Software allows SQL Injection. This issue affects Oil Management So...

References

https://www.usom.gov.tr/bildirim/tr-23-0533 Third Party Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0533

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker full control

Severity

9.8 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-89SQL Injection

Timeline

Published15 Sep 2023

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2023-4835 · NVD

Track software like this

Free during beta