Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-5955

SQLi in Inrove Software's BiEticaret

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Inrove Software and Internet Services BiEticaret allows SQL Injection. This issue affects BiEticaret: before v3.3.57.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Inrove Software And Internet Services
Products
Bieticaret Cms
CVE-2026-5793

XSS in Inrove Software's BiEticaret

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Inrove Software and Internet Services BiEticaret allows Reflected XSS. This issue affects BiEticaret: before v3.3.57.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Inrove Software And Internet Services
Products
Bieticaret Cms
CVE-2025-8350

Authentication Bypass with Redirect in BiEticaret Software's BiEticaret CMS

Execution After Redirect (EAR), Missing Authentication for Critical Function vulnerability in Inrove Software and Internet Services BiEticaret CMS allows Authentication Bypass, HTTP Response Splitting. This issue affects BiEticaret CMS: from 2.1.13 through 19022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Inrove Software And Internet Services
Products
Bieticaret Cms