CVE-2023-1547: SQLi in Elra Computers Parkmatik

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-07-13 · updated 2026-06-17
Weakness: CWE-89

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection. This issue affects Parkmatik: before 02.01-a51.

Affected products

Elra Parkmatik: before 02.01-a51 — fixed in 02.01-a51

How to fix

Upgrade to a fixed version: Elra Parkmatik 02.01-a51. Check the vendor advisory for mitigations.

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-23-0404
https://www.usom.gov.tr/bildirim/tr-23-0404
https://www.usom.gov.tr/bildirim/tr-23-0404

Get alerted when CVE-2023-1547 or the next vulnerability affects your stack