🔐 CVE Alert

CVE-2024-12364

CRITICAL 9.8

SQLi in Mavi Yeşil Software's Guest Tracking Software

CVSS Score
9.8
EPSS Score
0.2%
EPSS Percentile
47th

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mavi Yeşil Software Guest Tracking Software allows SQL Injection. This issue affects Guest Tracking Software.  NOTE: The vendor did not inform about the completion of the fixing process within the specified time. The CVE will be updated when new information becomes available.

CWE CWE-89
Vendor mavi yeşil software
Product guest tracking software
Published Jun 27, 2025
Last Updated Jun 1, 2026
Stay Ahead of the Next One

Get instant alerts for mavi yeşil software guest tracking software

Be the first to know when new critical vulnerabilities affecting mavi yeşil software guest tracking software are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected Versions

Mavi Yeşil Software / Guest Tracking Software
0

References

NVD ↗ CVE.org ↗ EPSS Data ↗
usom.gov.tr: https://www.usom.gov.tr/bildirim/tr-25-0140 siberguvenlik.gov.tr: https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0140

Credits

Pınar TAŞĞIN