Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-4541 EUVD-2023-54396GHSA-qhv4-7gvj-867r

SQLi in Weens Admin Panel

Published Dec 29, 2023 · Updated May 21, 2026 · Assigned by TR-CERT

Vendor: Ween Software Product: Admin Panel

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ween Software Admin Panel allows SQL Injection.

This issue affects Admin Panel: through 20231229. 

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

VendorProductAffectedFixed
Ween Software Admin Panel ≤ 20231229 —

References