CVE-2023-2957

CRÍTICO 9.8CVE-2023-2957 · Published 13/07/2023 · updated 17/06/2026

En resumen

CVE-2023-2957 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a florist site (lisayazilim).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.62%, mayor que el 50.0% de las vulnerabilidades.
Solución: actualizar a 3.0 o posterior.

Package	Affected versions	Patched versions
florist site lisayazilim	`< 3.0`	`3.0`

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Lisa Software Florist Site allows SQL Injection. This issue affects Florist Site: before 3.0.

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0403
usom.gov.tr/bildirim/tr-23-0403 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free