CVE-2023-54163
NLB mKlik Macedonia 3.3.12 contains a SQL injection vulnerability in international transfer parameters that allows attackers to manipulate database queries. Attackers can inject arbitrary SQL code through unsanitized input to potentially disclose sensitive information from the mobile banking application.
Published:Dec 30, 2025
Last Modified:Jan 16, 2026
EPS:Dec 30, 2025
EPSS Score:0.00036
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Google
Product
Android
Google
Android
Vendor
Nlb
Product
Mklik Makedonija
Nlb
Mklik Makedonija
Vendor
Nlb Banka Ad Skopje
Product
Nlb Mklik Makedonija
Nlb Banka Ad Skopje
Nlb Mklik Makedonija
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
