QSearchQSearch

CVE-2023-5155

9.8 CRITICAL

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies Sol...

Published: 2024-02-15 · Last updated: 2026-05-20

Severity and scoring

CVSS
9.8 CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-89

Affected products

VendorProduct
utaritsolipay_mobile

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies SoliPay Mobile App allows SQL Injection. This issue affects SoliPay Mobile App: before 5.0.8.

Source: NVD

References

Related CVEs

Same vendor

  • CVE-2025-7358 — Use of Hard-coded Credentials vulnerability in Utarit Informatics Services Inc (7.5 HIGH)
  • CVE-2025-7047 — Missing Authorization vulnerability in Utarit Informatics Services Inc (4.3 MEDIUM)
  • CVE-2025-1031 — Authorization Bypass Through User-Controlled Key vulnerability in Utarit Informatics Services Inc (7.5 HIGH)
  • CVE-2025-1030 — Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Utarit Informatics Services Inc (7.5 HIGH)
  • CVE-2025-1029 — Use of Hard-coded Credentials vulnerability in Utarit Information Services Inc (7.5 HIGH)

Same CWE

  • CVE-2026-12206 — A vulnerability was identified in Grit42 Grit up to 0.11.0 (6.3 MEDIUM)
  • CVE-2026-12188 — A vulnerability was detected in Grit42 Grit up to 0.11.0 (6.3 MEDIUM)
  • CVE-2026-12175 — A vulnerability was detected in CodeAstro Student Attendance Management System 1.0 (4.7 MEDIUM)
  • CVE-2026-6428 — SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 2... (7.6 HIGH)
  • CVE-2026-9848 — The WP Ticket plugin for WordPress is vulnerable to SQL Injection via the WordPress search query parameter (`s`) in versions up to, and i... (7.5 HIGH)