CNNVD-202510-2031 Information
Oct 14, 2025
cve
CNNVD ID
CNNVD-202510-2031
Related CVE
- CNNVD Published: 2025-10-14
Description (Chinese)
SFS Winsure是土耳其SFS公司的一款保险解决方案套件。 SFS Winsure 21.08.2025及之前版本存在SQL注入漏洞,该漏洞源于特殊元素中和不当,可能导致盲SQL注入攻击。
Description (English)
SFS Winsure is a package of insurance solutions for SFS Turkey. The SFS Winsure 21.08.2025 and previous versions had an injection loophole in SQL, which originated in a special element and was inappropriate and could lead to an attack by blind SQL.
Hazard Level
Low
Vulnerability Type
SQL注入
Affected Vendor
SFS
Published
2025-10-14
Last Modified
2026-02-24
References
https://www.usom.gov.tr/bildirim/tr-25-0337
Patch
https://sfs.com.tr/end-to-end-insurance-solution-winsure/
Share on: