CVE-2023-0939: Online Services Project Online Services

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NTN Information Technologies Online Services Software allows SQL Injection. This issue affects Online Services Software: before 1.17.

Affected products

• Online Services Project Online Services: before 1.17 (fixed in 1.17)

Published 2023-02-23. Last modified 2026-06-17.