CVE-2025-10970 SQLi in Kolay Software's Talentics

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Kolay Software Inc. Talentics allows Blind SQL Injection. This issue affects Talentics: through 20022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way...

Kolay Talentics SQL注入漏洞

Kolay Talentics is a candidate tracking system and recruitment management platform developed by the Turkish company Kolay. Versions of Kolay Talentics from 2002 to 2026 and earlier had an SQL injection vulnerability. This vulnerability stemmed from improper handling of special elements within SQL...