Skip to content
OpenAdvisories
High · 8.6 CVE-2025-7631 EUVD-2025-207690GHSA-j7vj-8xmw-gvff

Time-Based Blind SQLi in Tumeva Internet Technologies' Tumeva Prime News Software

Published Feb 17, 2026 · Updated Jun 5, 2026 · Assigned by TR-CERT

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tumeva Internet Technologies Software Information Advertising and Consulting Services Trade Ltd. Co. Tumeva Prime News Software allows SQL Injection.

This issue affects Tumeva Prime News Software: from v.1.0.1 before v1.0.2.

Affected products

VendorProductAffectedFixed
Tumeva Internet Technologies Software Information Advertising and Consulting Services Trade Ltd. Co. Tumeva Prime News Software v.1.0.1 – < v1.0.2 v1.0.2

References