CVE-2025-5319

CRITICAL

DIGITA Efficiency Management System <03022026 - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-5319. PoCs published by sahici.

AI-analyzed exploit summary The repository contains only a README.md file with a placeholder message indicating an official announcement is pending. No exploit code or technical details are provided.

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Emit Informatics and Communication Technologies Industry and Trade Ltd. Co. DIGITA Efficiency Management System allows SQL Injection. This issue affects DIGITA Efficiency Management System: through 03022026.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Exploits (1)

nomisec STUB
by sahici · poc
https://github.com/sahici/CVE-2025-5319

The repository contains only a README.md file with a placeholder message indicating an official announcement is pending. No exploit code or technical details are provided.

Classification
Stub 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: unknown
No auth needed
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (2)

Core 2
Core References
Third Party Advisory, US Government Resource government-resource broken-link
https://www.usom.gov.tr/bildirim/tr-26-0016

Scores

CVSS v3 9.8
EPSS 0.0042
EPSS Percentile 33.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-89
Status published
Products (1)
Emit Informatics and Communication Technologies Industry and Trade Ltd. Co./DIGITA Efficiency Management System < 03022026
Published Feb 03, 2026
Tracked Since Feb 18, 2026