Vulnerability · Published Aug 15, 2025 · Assigned by TR-CERT

CVE-2025-1929SQLi in RiskTurk's Treasury Management Software

High 7.2

In plain English

A high-severity SQL injection in Reel Sektör Hazine ve Risk Yönetimi Yazılımı from Risk Yazılım Teknolojileri Ltd. Şti.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).

Severity (CVSS 3.1)7.2High

Exploit odds (30 days)0.5%top 58.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Risk Yazılım Teknolojileri Ltd. Şti. Reel Sektör Hazine ve Risk Yönetimi Yazılımı allows SQL Injection, CAPEC - 7 - Blind SQL Injection. This issue affects Reel Sektör Hazine ve Risk Yönetimi Yazılımı: through 1.0.0.4.

Affected products (as reported)

Vendor	Product	Versions
Risk Yazılım Teknolojileri Ltd. Şti.	Reel Sektör Hazine ve Risk Yönetimi Yazılımı	0 – through 1.0.0.4

Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References

https://www.usom.gov.tr/bildirim/tr-25-0198 government-resource, broken-link
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0198 government-resource