Paper/Archive/CVE-2024-13150

CVE-2024-13150

Fayton Software and Consulting Services fayton.pro ERP — SQLi in Fayton Software's fayton.pro ERP

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 28.8.288 × 205.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Fayton Software and Consulting Services fayton.Pro ERP allows SQL Injection. This issue affects fayton.Pro ERP: through 20250929.

Affected

ProductAffectedFixed inSource

fayton.pro ERP≤ 20250929–CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-25-0304 refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0304