← Back

CVE-2025-9953

nvd nist
Published: Feb 19, 2026Modified: Jun 25, 2026Deferred

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: iletisim@usom.gov.tr (Secondary)

Description

Authorization Bypass Through User-Controlled SQL Primary Key vulnerability in DATABASE Software Training Consulting Ltd. Databank Accreditation Software allows SQL Injection. This issue affects Databank Accreditation Software: before 2026/04.

Related CWEs

CWE-566
Authorization Bypass Through User-Controlled SQL Primary Key
The product uses a database table that includes records that should not be accessible to an actor, but it executes a SQL statement with a primary key that can be controlled by that actor.

References (2)

Source: iletisim@usom.gov.tr
Source: iletisim@usom.gov.tr

Timeline

No history available yet.