Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

Vulnerability IntelligenceCVE-2025-4686

CVE-2025-4686

HIGH8.6

Time-Based Blind SQLi in Kodmatic Computer's Online Exam and Assessment

Published Jan 30, 2026

Modified 4 days ago

Details

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kodmatic Computer Software Tourism Construction Industry and Trade Ltd. Co. Online Exam and Assessment allows SQL Injection.This issue affects Online Exam and Assessment: through 30012026.

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

References

ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-4686 WEBhttps://www.usom.gov.tr/bildirim/tr-26-0010

CVSS Analysis

CVSS v3.1

8.6

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

LowI:L

Availability

HighA:H

8.6/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Weakness Type (CWE)

Injection

Ecosystems

Timeline

PublishedJan 30, 2026

ModifiedJan 30, 2026

CVE-2025-4686 | Mondoo Vulnerability Intelligence