CVE-2024-8259 | THREATINT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eryaz Information Technologies NatraCar B2B Dealer Management Program allows SQL Injection.This issue affects NatraCar B2B Dealer Management Program: through 09.12.2024. NOTE: The vendor was contacted and it was learned that the product is not supported.

PUBLISHED Reserved 2024-08-28 | Published 2024-12-09 | Updated 2025-04-03 | Assigner TR-CERT

CRITICAL: 9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Product status

Default status

affected

Any version

affected

Credits

Pinar TASGIN finder

References

www.usom.gov.tr/bildirim/tr-24-1881

cve.org (CVE-2024-8259)

nvd.nist.gov (CVE-2024-8259)

Download JSON