Skip to content
OpenAdvisories
Critical · 9.8 CVE-2025-6830 EUVD-2025-207458GHSA-x566-frf2-p8rw

SQLi in Xpoda Türkiye Information Technology's Password Module

Published Feb 9, 2026 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Xpoda Türkiye Information Technology Inc. Password Module allows SQL Injection.

This issue affects Password Module: through 11022026.

Affected products

VendorProductAffectedFixed
Xpoda Türkiye Information Technology Password Module ≤ 11022026 —

References