CNNVD-202510-2031 Information

CNNVD ID

CNNVD-202510-2031

CVE-2025-10610

  • CNNVD Published: 2025-10-14

Description (Chinese)

SFS Winsure是土耳其SFS公司的一款保险解决方案套件。 SFS Winsure 21.08.2025及之前版本存在SQL注入漏洞,该漏洞源于特殊元素中和不当,可能导致盲SQL注入攻击。

Description (English)

SFS Winsure is a package of insurance solutions for SFS Turkey. The SFS Winsure 21.08.2025 and previous versions had an injection loophole in SQL, which originated in a special element and was inappropriate and could lead to an attack by blind SQL.

Hazard Level

Low

Vulnerability Type

SQL注入

Affected Vendor

SFS

Published

2025-10-14

Last Modified

2026-02-24

References

https://www.usom.gov.tr/bildirim/tr-25-0337

Patch

https://sfs.com.tr/end-to-end-insurance-solution-winsure/

Share on: