CVE Daily

CVE-2023-6436

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti...

Critical CVSS 9.8

Overview

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ekol Informatics Website Template allows SQL Injection.This issue affects Website Template: through 20231215.

CWE: CWE-89 Published: 2024-01-02T13:15:08.930
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.8 (CRITICAL)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags