Authenticated SQLi in Yirmibes Software's MY ERP
CVE-2025-4738

9.8CRITICAL

Key Information:

Vendor

Yirmibes Software

Status
My Erp
Vendor
CVE Published:
19 June 2025

What is CVE-2025-4738?

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yirmibes Software MY ERP allows SQL Injection.This issue affects MY ERP: before 1.170.

Affected Version(s)

MY ERP 0 < 1.170

References

https://www.usom.gov.tr/bildirim/tr-25-0132

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Furkan Enes POLATOÄžLU
.
CVE-2025-4738 : SQL Injection Vulnerability in Yirmibes Software MY ERP