9.8
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection.This issue affects SINAV.LINK Exam Result Module: before 1.2.
Basic Information
ID
CVE-2025-4688
Source
TR-CERT
Published
Sep 16, 2025 at 08:38
Affected Product
Vendor
BGS Interactive
Product
SINAV.LINK Exam Result Module
Affected Versions
BGS Interactive SINAV.LINK Exam Result Module 0