Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0
References
Link | Resource |
---|---|
https://www.usom.gov.tr/bildirim/tr-22-0747 | Third Party Advisory |
Configurations
History
16 Apr 2023, 09:15
Type | Values Removed | Values Added |
---|---|---|
Summary | Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0 |
08 Mar 2023, 14:15
Type | Values Removed | Values Added |
---|---|---|
Summary | Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. This has been fixed in the version 3.0 |
14 Jan 2023, 03:51
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:bulutses:bulutdesk_callcenter:*:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
First Time |
Bulutses bulutdesk Callcenter
Bulutses |
|
References | (CONFIRM) https://www.usom.gov.tr/bildirim/tr-22-0747 - Third Party Advisory | |
CWE | CWE-89 |
10 Jan 2023, 15:15
Type | Values Removed | Values Added |
---|---|---|
Summary | This issue affects: Bulutses Bilgi Teknolojileri LTD. ?T?. BULUTDESK CALLCENTER versions prior to 3.0. |
10 Jan 2023, 14:59
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-01-10 14:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-4422
Mitre link : CVE-2022-4422
CVE.ORG link : CVE-2022-4422
JSON object : View
Products Affected
bulutses
- bulutdesk_callcenter
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')