CVE-2023-35066

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infodrom Software E-Invoice Approval System allows SQL Injection. This issue affects E-Invoice Approval System: before v.20230701.

critical 9.8 CVSS 3.1
Published: Jul 25, 2023
Modified: May 22, 2026
Vendor: Infodrom
Product: E-Invoice Approval System

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infodrom Software E-Invoice Approval System allows SQL Injection.

This issue affects E-Invoice Approval System: before v.20230701.

References

Related CVEs

CVE-2023-35067 high · 7.5
Plaintext Storage of a Password vulnerability in Infodrom Software E-Invoice Approval System allows Read Sensitive Strings Within an Executable. This issue affects E-Invoice Appro