CVE-2023-1547 CRITICAL

CVE-2023-1547: SQLi in Elra Computers Parkmatik

Vendor Elra

Product Parkmatik

Weakness CWE-89 · SQLi

Published July 13, 2023

Last update June 1, 2026

View on NVD All CVEs

CVSS base score

9.8/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection. This issue affects Parkmatik: before 02.01-a51.

Key dates

02Disclosure timeline

July 13, 2023 CVE published

June 1, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-1547 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2024-6279 lahirudanushka School Management System Exam Results Page examresults-par.php sql injection CVE-2024-56212 WordPress UserPro plugin <= 5.1.9 - SQL Injection vulnerability CVE-2024-8344 Campcodes Supplier Management System edit_area.php sql injection CVE-2026-3148 SourceCodester Simple and Nice Shopping Cart Script signup.php sql injection CVE-2023-46821 WordPress GD Security Headers Plugin <= 1.7 is vulnerable to SQL Injection