CNNVD-202602-1632 Information

CNNVD ID

CNNVD-202602-1632

CVE-2025-7636

  • CNNVD Published: 2026-02-10

Description (Chinese)

Ergosis Security ZEUS PDKS是土耳其Ergosis Security公司的一个考勤与访问控制管理系统。 Ergosis Security ZEUS PDKS 1.0.5.10之前版本至10022026版本存在SQL注入漏洞,该漏洞源于SQL命令中特殊元素中和不当,可能导致SQL注入。

Description (English)

Ergosis Security ZEUS PDKS is a time and access control management system for Ergosis Security in Turkey. The pre-versions of Ergosis Security ZEUS PDKS 1.5.10 to 100220226 contained a SQL injection loophole, which originated in the misalignment of special elements in SQL orders and could lead to SQL injection.

Hazard Level

Medium

Vulnerability Type

SQL注入

Affected Vendor

Ergosis Security

Published

2026-02-10

Last Modified

2026-02-24

References

https://www.usom.gov.tr/bildirim/tr-26-0052

Patch

https://ergosis.com.tr/

Share on: