CVE-2025-10610

critical · 9.8

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SFS Consulting Information Processing Industry and Foreign Trade Inc. Winsure allows Blind SQL Injection. This issue affects Winsure: through Version dated 21.08.2025.

9.8

CVSS

0.4%

EPSS (exploit prob.)

31st

EPSS percentile

2025-10-14

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-89

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0337
https://www.usom.gov.tr/bildirim/tr-25-0337

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-10610