Teknolojik Center B2B - Netsis Panel SQL Injection Vulnerability

A SQL injection vulnerability has been identified in the B2B - Netsis Panel product by Teknolojik Center Telecommunication Industry Trade Co. Ltd. This vulnerability allows for improper neutralization of special elements used in SQL commands, potentially leading to unauthorized database access or manipulation. The issue affects B2B - Netsis Panel versions through 20251003.

Impact

Exploitation of this vulnerability allows cyber attackers to perform SQL injection attacks, potentially leading to unauthorized access to the database, manipulation of database contents, or execution of administrative operations on the database server.

Remediation

The vulnerability has not yet been addressed by the vendor. The National Cyber Incident Response Center (USOM) recommends using an alternative software.