Paper/Archive/CVE-2025-5319

CVE-2025-5319

Emit Informatics and Communication Technologies Industry and Trade Ltd. Co. DIGITA Efficiency Management System — SQLi in Emit Informatics' DIGITA Efficiency Management System

EPSS 0.5%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 40.0.400 × 208.0 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Emit Informatics and Communication Technologies Industry and Trade Ltd. Co. DIGITA Efficiency Management System allows SQL Injection. This issue affects DIGITA Efficiency Management System: through 03022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected

ProductAffectedFixed inSource

DIGITA Efficiency Management System≤ 03022026–CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-26-0016 refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0016