Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-6677 EUVD-2023-58899GHSA-65rc-w4m4-m762

SQLi in Oduyo Online Collection Software

Published Feb 9, 2024 · Updated May 20, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oduyo Financial Technology Online Collection allows SQL Injection.

This issue affects Online Collection: before v.1.0.2.

Affected products

VendorProductAffectedFixed
Oduyo Financial Technology Online Collection < v.1.0.2 v.1.0.2

References