CVE-2025-4688

CRITICAL

BGS Interactive SINAV.LINK <1.2 - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-4688. PoCs published by sahici.

AI-analyzed exploit summary The repository contains only a README.md file with a placeholder message indicating an official announcement is pending. No exploit code or technical details are provided.

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2.

Exploits (1)

nomisec STUB
by sahici · poc
https://github.com/sahici/CVE-2025-4688

The repository contains only a README.md file with a placeholder message indicating an official announcement is pending. No exploit code or technical details are provided.

Classification
Stub 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: unspecified
No auth needed
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (2)

Core 2
Core References
Third Party Advisory, US Government Resource government-resource broken-link
https://www.usom.gov.tr/bildirim/tr-25-0252

Scores

CVSS v3 9.8
EPSS 0.0041
EPSS Percentile 32.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-89
Status published
Products (1)
BGS Interactive/SINAV.LINK Exam Result Module < 1.2
Published Sep 16, 2025
Tracked Since Feb 18, 2026