CVE-2025-4688
CVE-2025-4688
9.8
CriticalPublished:
Last updated:
Source:iletisim@usom.gov.tr
Deferred
Weakness (CWE)
CVSS Vector
v3.1- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2.
References
iletisim@usom.gov.tr
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0252iletisim@usom.gov.tr
https://www.usom.gov.tr/bildirim/tr-25-0252