SQL Injection Vulnerability in Webpack Management System by Eksagate Electronic Engineering
CVE-2025-10437

9.8CRITICAL

What is CVE-2025-10437?

A vulnerability exists in the Webpack Management System developed by Eksagate Electronic Engineering and Computer Industry Trade Inc. This flaw is categorized as an SQL Injection issue, which allows attackers to manipulate SQL queries by injecting malicious code. If exploited, this can lead to unauthorized access to sensitive data and potentially compromise the entire database. Users of the affected system are urged to take immediate measures to secure their applications and apply any available patches.

Affected Version(s)

Webpack Management System 0 <= 20251119

References

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Barış BAYDUR
.
CVE-2025-10437 : SQL Injection Vulnerability in Webpack Management System by Eksagate Electronic Engineering