Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-7081 EUVD-2023-59265GHSA-fcvq-gxqf-xcj4

SQLi in PosTahsil's Online Payment System

Published Feb 15, 2024 · Updated May 20, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in POSTAHSİL Online Payment System allows SQL Injection.

This issue affects Online Payment System: before 14.02.2024.

Affected products

VendorProductAffectedFixed
POSTAHSİL Online Payment System < 14.02.2024 14.02.2024

References