CVE-2023-4674: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yaztek S

Q: How do I fix CVE-2023-4674?

e-commerce: upgrade to newer than 20231229. Exact commands for each OS are on this page.

Q: Is CVE-2023-4674 being exploited?

CVE-2023-4674 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

Q: What does CVE-2023-4674 affect?

CVE-2023-4674 affects e-commerce. Severity is high (CVSS n/a). Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yaztek Software Technologies and Computer Systems E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: throu

Q: How urgent is CVE-2023-4674?

Priority 5/100. No elevated risk signals yet.

Routine

HIGH n/aUPGRADE

CVE-2023-4674 is a high-severity flaw (CVSS n/a) affecting e-commerce. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yaztek Software Technologies and Computer Systems E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: through 20231229. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Why this priority

No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score	n/a (High)
EPSS exploit chance	0.3% (top 81%)
CISA exploited list	No
Weakness	CWE-89
Published	2023-12-29
Last modified	2026-06-17

Publisher (CNA): Computer Emergency Response Team of the Republic of Turkey · Vendor: yaztekteknoloji

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2023-12-29 15:15 UTCPublished CVE record published
2026-06-17 06:38 UTCUpdated Record last modified

yaztekteknoloji e-commerce UPGRADE

Affected: <= 20231229

Fixed in: newer than 20231229

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy e-commerce || rpm -q e-commerce || e-commerce --version

2. UPGRADE to newer than 20231229 (Debian / Ubuntu)

sudo apt update && sudo apt install --only-upgrade e-commerce

2. UPGRADE (RHEL / Amazon Linux / Fedora)

sudo dnf upgrade e-commerce

Note

Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2023-4674?

e-commerce: upgrade to newer than 20231229. Exact commands for each OS are on this page.

Is CVE-2023-4674 being exploited?

CVE-2023-4674 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2023-4674 affect?

CVE-2023-4674 affects e-commerce. Severity is high (CVSS n/a). Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yaztek Software Technologies and Computer Systems E-Commerce Software allows SQL Injection. This issue affects E-Commerce Software: throu

How urgent is CVE-2023-4674?

Priority 5/100. No elevated risk signals yet.

Related CVEs

CVE-2026-2165 HIGH 7.3 DOWNGRADE A weakness has been identified in detronetdip E-commerce 1.0.0
CVE-2026-2164 HIGH 7.3 DOWNGRADE A security flaw has been discovered in detronetdip E-commerce 1.0.0
CVE-2025-63883 MEDIUM 5.4 DOWNGRADE A DOM-based cross-site scripting vulnerability exists in electic-shop v1.0 (Bhabishya-123/E-commerce)
CVE-2025-15583 LOW 3.5 DOWNGRADE A weakness has been identified in detronetdip E-commerce 1.0.0
CVE-2025-15582 MEDIUM 5.4 DOWNGRADE A security flaw has been discovered in detronetdip E-commerce 1.0.0

References

← Back to latest CVEs