Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kolay Software Inc. Talentics allows Blind SQL Injection.This issue affects Talentics: through 20022026.
NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://www.usom.gov.tr/bildirim/tr-26-0081 |
Configurations
No configuration.
History
20 Feb 2026, 12:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-20 12:16
Updated : 2026-02-20 13:49
NVD link : CVE-2025-10970
Mitre link : CVE-2025-10970
CVE.ORG link : CVE-2025-10970
JSON object : View
Products Affected
No product.
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')