Description

An Improper Neutralization of Special Elements used in an SQL Command vulnerability (CWE-89) allowing SQL Injection in Akıllı Ticaret's E-Commerce Website. Affects versions before 4.5.001. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

CVSS Vector

Primary assessmentCNA · 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AV: NetworkAC: LowPR: NoneUI: NoneS: UnchangedC: HighI: HighA: High

References

Record Verification

CreditThe official CVE record credits Sevban Alp DÖNMEZ as finder
PublishedThe CVE record was published on 2026-05-12
CheckedMetadata last checked against the CVE Services record on 2026-08-23