CVE-2024-9286

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TRtek Software Distant Education Platform allows SQL Injection, Parameter Injection. This issue affects Distant Education Platform: before 3.2024.11.

Score

CVSS 4.0 8.8 High

Status

Deferred - iletisim@usom.gov.tr

Published

2024-10-09

Last modified

2026-06-02

Weaknesses

CWE-89

Affected products

• Distant Education Platform (Trtek Software)

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1649
• https://www.usom.gov.tr/bildirim/tr-24-1649