Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-13151 EUVD-2025-29901GHSA-h8h7-vv55-qhxg

SQLi in ESBI Informatics's Auto Service Software

Published Sep 18, 2025 · Updated Jun 1, 2026 · Assigned by TR-CERT

Description

CWE - 89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ESBI Information and Telecommunication Industry and Trade Limited Company Auto Service Software allows SQL Injection.

This issue affects Auto Service Software: before v.2025.10.01.

Affected products

VendorProductAffectedFixed
ESBI Information and Telecommunication Industry and Trade Limited Company Auto Service Software < v.2025.10.01 v.2025.10.01

References