CVE-2025-10439

EUVD-2025-29709
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yordam Informatics Yordam Library Automation System allows SQL Injection.

This issue affects Yordam Library Automation System: from 21.5 & 21.6 before 21.7.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 24%
Common Weakness Enumeration
References
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0268
https://www.usom.gov.tr/bildirim/tr-25-0268