Vulnerability details
CVE-2024-3370
Egebilgi Software Website Templateegeabilgi_software website_template
SQLi in Egebilgi Software's Website Template
CVSS 4.0
8.8High
Official description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Egebilgi Software Website Template allows SQL Injection. This issue affects Website Template: before 29.04.2024.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.8High | 4.0 | CVEProject cvelistV5 (CNA) (TR-CERT) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N |
| 8.6High | 3.1 | CISA ADP / Vulnrichment (CISA-ADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Egebilgi Software | Website Template | v < 29.04.2024 | CVEProject cvelistV5 (CNA) |
| egeabilgi_software | website_template | v < 29.04.2024 | CISA ADP / Vulnrichment |
References and advisories
2- https://www.usom.gov.tr/bildirim/tr-24-1860 government-resourcebroken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1860 government-resource
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2024-11-18
- Last updated
- 2026-06-03
- State
- Published
- Assigner (CNA)
- TR-CERT
Exploit prediction (EPSS)
0.31%
Probability of exploitation in 30 days
25%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- Yes
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')