← back
CVE-2025-5319

SQLi in Emit Informatics' DIGITA Efficiency Management System

CVSS 9.8 CRITICALEPSS 0.4%CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Emit Informatics and Communication Technologies Industry and Trade Ltd. Co. DIGITA Efficiency Management System allows SQL Injection. This issue affects DIGITA Efficiency Management System: through 03022026.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Emit Informatics and Communication Technologies Industry and Trade Ltd. Co. · DIGITA Efficiency Management System

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0016https://www.usom.gov.tr/bildirim/tr-26-0016