CVE-2024-13151 - SQLi in ESBI Informatics's Auto Service Software

Back Back to CVE browser

CRITICAL

SQLi in ESBI Informatics's Auto Service Software

Published Sep 18, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 0.36%

Description

CWE - 89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ESBI Information and Telecommunication Industry and Trade Limited Company Auto Service Software allows SQL Injection.

This issue affects Auto Service Software: before v.2025.10.01.

Affected products

Vendor ESBI Information and Telecommunication Industry and Trade Limited Company Product Auto Service Software Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <v.2025.10.01

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ESBI Information and Telecommunication Industry and Trade Limited Company

Auto Service Software

unaffected

Version	Status	Constraints
0	affected	<v.2025.10.01

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-29901
Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0273
government-resource
https://www.usom.gov.tr/bildirim/tr-25-0273
government-resourcebroken-link

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-29901		Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0273		government-resource
https://www.usom.gov.tr/bildirim/tr-25-0273		government-resourcebroken-link