Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-5955: BiEticaret SQL Injection via Malformed SQL

CVE-2026-5955

Summary

BiEticaret versions before 3.3.57 are vulnerable to a security risk that allows an attacker to manipulate data or access unauthorized information. This is a serious issue that can compromise the security of your data. To protect your system, update to version 3.3.57 or later.

Original title

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Inrove Software and Internet Services BiEticaret allows SQL Injection. This issue affects BiEt...

Original description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Inrove Software and Internet Services BiEticaret allows SQL Injection.

This issue affects BiEticaret: before v3.3.57.

nvd CVSS3.1 9.8

Vulnerability type

CWE-89 SQL Injection

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0519

Published: 9 Jul 2026 · Updated: 20 Jul 2026 · First seen: 9 Jul 2026