CVE-2025-1929

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Risk Yazılım Teknolojileri Ltd. Şti. Reel Sektör Hazine ve Risk Yönetimi Yazılımı allows SQL Injection, CAPEC - 7 - Blind SQL Injection. This issue affects Reel Sektör Hazine ve Risk Yönetimi Yazılımı: through 1.0.0.4.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0198
https://www.usom.gov.tr/bildirim/tr-25-0198

Configurations

No configuration.

History

No history.

Information

Published : 2025-08-15 12:15

Updated : 2026-06-17 08:40

NVD link : CVE-2025-1929

Mitre link : CVE-2025-1929

CVE.ORG link : CVE-2025-1929

JSON object : View

Products Affected

No product.

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2025-1929", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-1929", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-08-15T12:54:48.282703Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "affected": [{"source": "iletisim@usom.gov.tr", "affectedData": [{"vendor": "Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti.", "product": "Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.0.0.4"}], "defaultStatus": "unaffected"}]}], "published": "2025-08-15T12:15:25.203", "references": [{"url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0198", "source": "iletisim@usom.gov.tr"}, {"url": "https://www.usom.gov.tr/bildirim/tr-25-0198", "source": "iletisim@usom.gov.tr"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "iletisim@usom.gov.tr", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti. Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131 allows SQL Injection, CAPEC - 7 - Blind SQL Injection.\n\nThis issue affects Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131: through 1.0.0.4."}, {"lang": "es", "value": "Neutralizaci\u00f3n inadecuada de elementos especiales utilizados en una vulnerabilidad de comando SQL (\"inyecci\u00f3n SQL\") en Risk Yaz?l?m Teknolojileri Ltd. ?ti. Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz?l?m? permite la inyecci\u00f3n SQL, CAPEC - 7 - Inyecci\u00f3n SQL ciega. Este problema afecta a Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz?l?m?: hasta 1.0.0.4."}], "lastModified": "2026-06-17T08:40:21.790", "sourceIdentifier": "iletisim@usom.gov.tr"}