Lucene search
+L

22 matches found

NVD
NVD
•added 2026/07/09 10:16 a.m.•29 views

CVE-2026-5793

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Inrove Software and Internet Services BiEticaret allows Reflected XSS. This issue affects BiEticaret: before v3.3.57...

6.1CVSS0.00253EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/09 10:16 a.m.•69 views

CVE-2026-5955

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Inrove Software and Internet Services BiEticaret allows SQL Injection. This issue affects BiEticaret: before v3.3.57...

9.8CVSS0.00468EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/09 8:26 a.m.•52 views

CVE-2026-5955

BiEticaret (Inrove Software and Internet Services) is affected by CVE-2026-5955 due to improper neutralization of special elements in SQL commands, enabling SQL injection. The issue affects BiEticaret prior to version 3.3.57. CVSS 3.1 metrics indicate a Network attack vector, no privileges requir...

9.8CVSS6AI score0.00468EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/09 8:26 a.m.•19 views

EUVD-2026-42548

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Inrove Software and Internet Services BiEticaret allows SQL Injection. This issue affects BiEticaret: before v3.3.57...

9.8CVSS6AI score0.00468EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/09 8:26 a.m.•44 views

CVE-2026-5955 SQLi in Inrove Software's BiEticaret

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Inrove Software and Internet Services BiEticaret allows SQL Injection. This issue affects BiEticaret: before v3.3.57...

9.8CVSS0.00468EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/09 8:26 a.m.•17 views

CVE-2026-5955

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Inrove Software and Internet Services BiEticaret allows SQL Injection. This issue affects BiEticaret: before v3.3.57...

9.8CVSS6AI score0.00468EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/07/09 8:22 a.m.•15 views

EUVD-2026-42546

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Inrove Software and Internet Services BiEticaret allows Reflected XSS. This issue affects BiEticaret: before v3.3.57...

6.1CVSS5.9AI score0.00253EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/09 8:22 a.m.•74 views

CVE-2026-5793 XSS in Inrove Software's BiEticaret

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Inrove Software and Internet Services BiEticaret allows Reflected XSS. This issue affects BiEticaret: before v3.3.57...

6.1CVSS0.00253EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/09 8:22 a.m.•21 views

CVE-2026-5793

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Inrove Software and Internet Services BiEticaret allows Reflected XSS. This issue affects BiEticaret: before v3.3.57...

6.1CVSS5.9AI score0.00253EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/09 12:00 a.m.•26 views

PT-2026-56766

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Inrove Software and Internet Services BiEticaret allows Reflected XSS. This issue affects BiEticaret: before v3.3.57...

6.1CVSS5.9AI score0.00253EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/09 12:00 a.m.•2 views

CVE-2026-5955: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Inrove Software and Internet Services BiEticaret allows SQL Injection. This issue affects BiEticaret: before v3.3.57...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/09 12:00 a.m.•1 views

CVE-2026-5793: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' vulnerability in Inrove Software and Internet Services BiEticaret allows Reflected XSS. This issue affects BiEticaret: before v3.3.57...

6.1CVSS5.8AI score0.00253EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/09 12:00 a.m.•24 views

PT-2026-56767

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Inrove Software and Internet Services BiEticaret allows SQL Injection. This issue affects BiEticaret: before v3.3.57...

9.8CVSS6AI score0.00468EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/02/20 1:25 p.m.•19 views

CVE-2025-8350

Execution After Redirect EAR, Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Response Splitting.This issue affects BiEticaret CMS: from 2.1.13 through 19022026. NOTE: The vendor was contacted...

9.8CVSS5.5AI score0.00569EPSS
SaveExploits0References1
NVD
NVD
•added 2026/02/19 12:16 p.m.•19 views

CVE-2025-8350

Execution After Redirect EAR, Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Response Splitting. This issue affects BiEticaret CMS: from 2.1.13 through 19022026. NOTE: The vendor was contacted...

9.8CVSS0.00569EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/02/19 11:30 a.m.•13 views

CVE-2025-8350 Authentication Bypass with Redirect in BiEticaret Software's BiEticaret CMS

Execution After Redirect EAR, Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Response Splitting. This issue affects BiEticaret CMS: from 2.1.13 through 19022026. NOTE: The vendor was contacted...

9.8CVSS5.5AI score0.00569EPSS
SaveExploits0References2
CVE
CVE
•added 2026/02/19 11:30 a.m.•30 views

CVE-2025-8350

Technical details about CVE-2025-8350 are not publicly available in the supplied documents; no concrete exploit, patch, or vendor details are provided here. Monitor for updates.

9.8CVSS5.5AI score0.00569EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/02/19 11:30 a.m.•12 views

CVE-2025-8350

Execution After Redirect EAR, Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Response Splitting. This issue affects BiEticaret CMS: from 2.1.13 through 19022026. NOTE: The vendor was contacted...

9.8CVSS5.5AI score0.00569EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/02/19 11:30 a.m.•47 views

CVE-2025-8350 Authentication Bypass with Redirect in BiEticaret Software's BiEticaret CMS

Execution After Redirect EAR, Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Response Splitting. This issue affects BiEticaret CMS: from 2.1.13 through 19022026. NOTE: The vendor was contacted...

9.8CVSS0.00569EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/19 12:00 a.m.•0 views

CVE-2025-8350: Execution After Redirect (EAR)

Execution After Redirect EAR, Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Response Splitting. This issue affects BiEticaret CMS: from 2.1.13 through 19022026. NOTE: The vendor was contacted...

9.8CVSS5.8AI score0.00569EPSS
SaveExploits0References3
Rows per page
Query Builder