Critical · 9.8 CVE-2024-12144 EUVD-2024-54010GHSA-v4ww-8j7m-x2h2

SQLi in Finder Fire Safety's Finder ERP/CRM (Old System)

Published Mar 6, 2025 · Updated Jun 1, 2026 · Assigned by TR-CERT

Vendor: Finder Fire Safety Product: Finder ERP/CRM (Old System)

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Finder Fire Safety Finder ERP/CRM (Old System) allows SQL Injection.

This issue affects Finder ERP/CRM (Old System): before 18.12.2024.

Affected products

Vendor	Product	Affected	Fixed
Finder Fire Safety	Finder ERP/CRM (Old System)	< 18.12.2024	18.12.2024

References

https://www.usom.gov.tr/bildirim/tr-25-0060 government-resource broken-link
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0060 government-resource