by Kastro
Paper/Archive/CVE-2025-4688

CVE-2025-4688

BGS Interactive SINAV.LINK Exam Result Module — SQLi in BGS Interactive's SINAV.LINK Exam Result Module

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 38.4.384 × 207.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2.

Affected

ProductAffectedFixed inSource
SINAV.LINK Exam Result Module< 1.21.2CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-25-0252refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0252