Paper/Archive/CVE-2025-6830

CVE-2025-6830

Xpoda Türkiye Information Technology Inc. Password Module — SQLi in Xpoda Türkiye Information Technology's Password Module

EPSS 0.5%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 40.8.408 × 208.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpoda Türkiye Information Technology Inc. Password Module allows SQL Injection. This issue affects Password Module: through 11022026.

Affected

ProductAffectedFixed inSource

Password Module≤ 11022026–CNA

Scores by source

TR-CERT (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refusom.gov.tr/bildirim/tr-26-0020 refsiberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0020