critical9.8
CVE-2023-2907
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Marksoft allows SQL Injection.
Impact
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Marksoft allows SQL Injection. This issue affects Marksoft: through Mobile:v.7.1.7 ; Login:1.4 ; API:20230605.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Marksoft | Marksoft | through 7.1.7 |