Search

Find a vulnerability

Search criteria

    2 vulnerabilities by Risk Yazılım Teknolojileri Ltd. Şti.

    CVE-2025-1929 (GCVE-0-2025-1929)

    Vulnerability from nvd – Published: 2025-08-15 12:06 – Updated: 2026-06-06 06:23
    VLAI
    Title
    SQLi in RiskTurk's Treasury Management Software
    Summary
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Risk Yazılım Teknolojileri Ltd. Şti. Reel Sektör Hazine ve Risk Yönetimi Yazılımı allows SQL Injection, CAPEC - 7 - Blind SQL Injection. This issue affects Reel Sektör Hazine ve Risk Yönetimi Yazılımı: through 1.0.0.4.
    Severity
    7.2 (High)
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-08-15 12:54 UTC
    CWE
    • CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
    Assigner
    References
    Impacted products
    Credits
    Ertuğrul KUZGUN
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-1929",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-15T12:54:48.282703Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-15T12:57:31.198Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131",
          "vendor": "Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti.",
          "versions": [
            {
              "lessThanOrEqual": "1.0.0.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ertu\u011frul KUZGUN"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027) vulnerability in Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti. Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131 allows SQL Injection, CAPEC - 7 - Blind SQL Injection.\u003cp\u003eThis issue affects Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131: through 1.0.0.4.\u003c/p\u003e"
            }
          ],
          "value": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027) vulnerability in Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti. Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131 allows SQL Injection, CAPEC - 7 - Blind SQL Injection.\n\nThis issue affects Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131: through 1.0.0.4."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-66",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-66 SQL Injection"
            }
          ]
        },
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC - 7 - Blind SQL Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-06T06:23:49.410Z",
        "orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21",
        "shortName": "TR-CERT"
      },
      "references": [
        {
          "tags": [
            "government-resource",
            "broken-link"
          ],
          "url": "https://www.usom.gov.tr/bildirim/tr-25-0198"
        },
        {
          "tags": [
            "government-resource"
          ],
          "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0198"
        }
      ],
      "source": {
        "advisory": "TR-25-0198",
        "defect": [
          "TR-25-0198"
        ],
        "discovery": "UNKNOWN"
      },
      "title": "SQLi in RiskTurk\u0027s Treasury Management Software",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21",
    "assignerShortName": "TR-CERT",
    "cveId": "CVE-2025-1929",
    "datePublished": "2025-08-15T12:06:43.436Z",
    "dateReserved": "2025-03-04T12:29:12.096Z",
    "dateUpdated": "2026-06-06T06:23:49.410Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2025-1929 (GCVE-0-2025-1929)

    Vulnerability from cvelistv5 – Published: 2025-08-15 12:06 – Updated: 2026-06-06 06:23
    VLAI
    Title
    SQLi in RiskTurk's Treasury Management Software
    Summary
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Risk Yazılım Teknolojileri Ltd. Şti. Reel Sektör Hazine ve Risk Yönetimi Yazılımı allows SQL Injection, CAPEC - 7 - Blind SQL Injection. This issue affects Reel Sektör Hazine ve Risk Yönetimi Yazılımı: through 1.0.0.4.
    Severity
    7.2 (High)
    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2025-08-15 12:54 UTC
    CWE
    • CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
    Assigner
    References
    Impacted products
    Credits
    Ertuğrul KUZGUN
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-1929",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-08-15T12:54:48.282703Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-08-15T12:57:31.198Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131",
          "vendor": "Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti.",
          "versions": [
            {
              "lessThanOrEqual": "1.0.0.4",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ertu\u011frul KUZGUN"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027) vulnerability in Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti. Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131 allows SQL Injection, CAPEC - 7 - Blind SQL Injection.\u003cp\u003eThis issue affects Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131: through 1.0.0.4.\u003c/p\u003e"
            }
          ],
          "value": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027) vulnerability in Risk Yaz\u0131l\u0131m Teknolojileri Ltd. \u015eti. Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131 allows SQL Injection, CAPEC - 7 - Blind SQL Injection.\n\nThis issue affects Reel Sekt\u00f6r Hazine ve Risk Y\u00f6netimi Yaz\u0131l\u0131m\u0131: through 1.0.0.4."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-66",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-66 SQL Injection"
            }
          ]
        },
        {
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC - 7 - Blind SQL Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-06T06:23:49.410Z",
        "orgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21",
        "shortName": "TR-CERT"
      },
      "references": [
        {
          "tags": [
            "government-resource",
            "broken-link"
          ],
          "url": "https://www.usom.gov.tr/bildirim/tr-25-0198"
        },
        {
          "tags": [
            "government-resource"
          ],
          "url": "https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0198"
        }
      ],
      "source": {
        "advisory": "TR-25-0198",
        "defect": [
          "TR-25-0198"
        ],
        "discovery": "UNKNOWN"
      },
      "title": "SQLi in RiskTurk\u0027s Treasury Management Software",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ca940d4e-fea4-4aa2-9a58-591a58b1ce21",
    "assignerShortName": "TR-CERT",
    "cveId": "CVE-2025-1929",
    "datePublished": "2025-08-15T12:06:43.436Z",
    "dateReserved": "2025-03-04T12:29:12.096Z",
    "dateUpdated": "2026-06-06T06:23:49.410Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}