CVE-2023-3651

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Digital Ant E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: before 11.

critical 9.8 CVSS 3.1
Published: Aug 8, 2023
Modified: May 21, 2026
Vendor: Digital-Ant
Product: Digital Ant

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Digital Ant E-Commerce Software allows SQL Injection.

This issue affects E-Commerce Software: before 11.

References

Related CVEs

CVE-2023-3652 medium · 6.1
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Commerce Software allows Reflected XSS. This issue affects E-Co
CVE-2023-3653 medium · 5.4
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Commerce Software allows Stored XSS. This issue affects E-Comme