PT-2026-22335 · Dayneks Software Industry Trade · Dayneks Software Industry/Trade Inc. E-Commerce Platform

Akıner Kisa · Published 2026-02-27 · Updated 2026-03-04 · CVE-2025-11251

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dayneks Software Industry and Trade Inc. E-Commerce Platform versions through 27022026

Description The Dayneks Software Industry and Trade Inc. E-Commerce Platform is affected by an Improper Neutralization of Special Elements used in an SQL Command issue, also known as SQL Injection. This allows for the execution of malicious SQL commands when an attacker inserts unsanitized SQL code into input fields. The vendor was contacted regarding this issue but did not respond.

Recommendations Versions through 27022026 should be updated when a fixed version is available. As a temporary workaround, implement robust input validation and sanitization for all user-supplied data used in SQL queries.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-11251

Affected Products

Dayneks Software Industry/Trade Inc. E-Commerce Platform

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-11251 · Security Note
• https://twitter.com/TheHackerWire/status/2027368484850766034 · Twitter Post
• https://twitter.com/cracbot/status/2029150019237109827 · Twitter Post
• https://twitter.com/CveTodo/status/2027360153272549432 · Twitter Post
• https://twitter.com/CVEnew/status/2027380155153310050 · Twitter Post
• https://usom.gov.tr/bildirim/tr-26-0084 · Note
• https://t.me/cveNotify/153455 · Telegram Post
• https://twitter.com/CveFindCom/status/2027363397415624753 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2027385114192138367 · Twitter Post
• https://t.me/CVEtracker/45973 · Telegram Post