Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection.
This issue affects Smartpower Web: before 23.01.01.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Group Arge Energy and Control Systems | Smartpower Web | < 23.01.01 | 23.01.01 |
References
- https://www.usom.gov.tr/bildirim/tr-23-0066 government-resource broken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0066 government-resource