CVE-2023-2907: Marksoft

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Marksoft allows SQL Injection. This issue affects Marksoft: through Mobile:v.7.1.7 ; Login:1.4 ; API:20230605.

Affected products

• Marksoft Marksoft: up to and including 7.1.7

Published 2023-06-19. Last modified 2026-06-17.