CVE-2024-9286

EUVD-2024-50304
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TRtek Software Distant Education Platform allows SQL Injection, Parameter Injection.

This issue affects Distant Education Platform: before 3.2024.11.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 38%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
trtek_softwaredistant_education_platform
𝑥
< 3.2024.11
ADP
Common Weakness Enumeration
References
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1649
https://www.usom.gov.tr/bildirim/tr-24-1649