CVE-2023-1547

Summary

CVE-2023-1547 is an SQL Injection vulnerability affecting Elra Parkmatik before 02.01-a51. An attacker can exploit this issue by tampering with SOAP parameters, enabling them to inject malicious SQL commands. This vulnerability poses a serious risk, as it can lead to Command Line Execution through SQL Injection. By bypassing input validation, an attacker can manipulate the database, potentially gaining unauthorized access or causing data damage. Organizations using Elra Parkmatik are urged to upgrade to a patched version to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.