CVE-2023-4530 SQLi in Turna Media's Advertising Administration Panel

CriticalCVSS 9.8 EPSS 0.62%

Published: 2023-10-06 12:16
Updated: 2026-06-17 09:38
Exploit status: No public exploit known

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Turna Advertising Administration Panel allows SQL Injection.

This issue affects Advertising Administration Panel: before 1.1.

Affected products

Product	Affected versions	Fixed in
Turna Advertising Administration Panel	< 1.1	1.1
turnatasarim advertising administration panel	< 1.1	1.1

References

www.usom.gov.tr broken-link government-resource third-party-advisory
siberguvenlik.gov.tr government-resource

CVSS v3.1

9.8 Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

All scores (2)

v3.1 9.8 · tr-cert
v3.1 9.8 · iletisim@usom.gov.tr

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.62% (percentile 50.2)
CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.