CVE-2025-5329

CRITICAL

Martcode Software Inc. Delta Course Automation through 04022026 <4.02.2026 - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-5329. PoCs published by sahici.

AI-analyzed exploit summary The repository contains only a README.md file with a placeholder message indicating an official announcement is pending. No exploit code or technical details are provided.

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Martcode Software Inc. Delta Course Automation allows SQL Injection. This issue affects Delta Course Automation: through 04022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Exploits (1)

nomisec STUB
by sahici · poc
https://github.com/sahici/CVE-2025-5329

The repository contains only a README.md file with a placeholder message indicating an official announcement is pending. No exploit code or technical details are provided.

Classification
Stub 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: unknown
No auth needed
devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (2)

Core 2
Core References
Third Party Advisory, US Government Resource government-resource broken-link
https://www.usom.gov.tr/bildirim/tr-26-0018

Scores

CVSS v3 9.8
EPSS 0.0045
EPSS Percentile 35.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-89
Status published
Products (1)
Martcode Software Inc./Delta Course Automation < 04022026
Published Feb 04, 2026
Tracked Since Feb 18, 2026