PT-2025-47452 · Unknown · Eksagate Webpack Management System

Barış Baydur · Published 2025-11-19 · Updated 2025-11-24 · CVE-2025-10437

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eksagate Webpack Management System versions through 20251119

Description A flaw exists in Eksagate Webpack Management System that allows for SQL Injection. This issue enables unauthorized database control without authentication. The vulnerability is due to improper neutralization of special elements within SQL commands.

Recommendations Versions prior to 20251119 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-10437

Affected Products

Eksagate Webpack Management System

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-10437 · Security Note
• https://usom.gov.tr/bildirim/tr-25-0401 · Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0401 · Note
• https://t.me/cveNotify/143322 · Telegram Post
• https://twitter.com/0dayPublishing/status/1991112956629643395 · Twitter Post
• https://t.me/CVEtracker/37736 · Telegram Post
• https://twitter.com/cracbot/status/1992911127194616187 · Twitter Post