CVE-2023-5046

CRÍTICO 9.8CVE-2023-5046 · Published 12/10/2023 · updated 17/06/2026

En resumen

CVE-2023-5046 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a procost (biltay).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.71%, mayor que el 53.6% de las vulnerabilidades.
Solución: actualizar a 1390 o posterior.

Package	Affected versions	Patched versions
procost biltay	`< 1390`	`1390`

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Biltay Technology Procost allows SQL Injection, Command Line Execution through SQL Injection. This issue affects Procost: before 1390.

References

siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0581
usom.gov.tr/bildirim/tr-23-0581 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free