Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Signum Technology Promotion and Training Inc. Windesk.Fm allows SQL Injection.This issue affects windesk.Fm: through 27022026.
NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://www.usom.gov.tr/bildirim/tr-26-0085 | Third Party Advisory |
Configurations
History
28 Feb 2026, 01:09
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:signumtte:windesk.fm:*:*:*:*:*:*:*:* | |
| First Time |
Signumtte windesk.fm
Signumtte |
|
| References | () https://www.usom.gov.tr/bildirim/tr-26-0085 - Third Party Advisory |
27 Feb 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-27 13:16
Updated : 2026-02-28 01:09
NVD link : CVE-2025-11252
Mitre link : CVE-2025-11252
CVE.ORG link : CVE-2025-11252
JSON object : View
Products Affected
signumtte
- windesk.fm
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')