Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-4674 EUVD-2023-54526GHSA-mxx7-h83w-7323

SQLi in Yazteks E-Commerce Software

Published Dec 29, 2023 · Updated May 21, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yaztek Software Technologies and Computer Systems E-Commerce Software allows SQL Injection.

This issue affects E-Commerce Software: through 20231229. 

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

VendorProductAffectedFixed
Yaztek Software Technologies and Computer Systems E-Commerce Software ≤ 20231229 —

References