{"id":"CVE-2024-7026","state":"PUBLISHED","title":"SQLi in Teknogis Informatics' Closed Circuit Vehicle Tracking Software","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknogis Informatics Closed Circuit Vehicle Tracking Software allows SQL Injection, Blind SQL Injection.\n\nThis issue affects Closed Circuit Vehicle Tracking Software: through 21.11.2024.\n\n\n\n\nNOTE: The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2024-11-21T13:21:59.843Z","updatedAt":"2026-06-03T11:59:40.019Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"TR-CERT"},"assigner":"TR-CERT","products":["Teknogis Informatics Closed Circuit Vehicle Tracking Software"],"affected":[{"vendor":"Teknogis Informatics","product":"Closed Circuit Vehicle Tracking Software","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"21.11.2024","versionType":"custom"}]}],"references":["https://www.usom.gov.tr/bildirim/tr-24-1866","https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1866"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/7xxx/CVE-2024-7026.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-7026","state":"PUBLISHED","datePublished":"2024-11-21T13:21:59.843Z","dateUpdated":"2026-06-03T11:59:40.019Z","assignerShortName":"TR-CERT","assignerOrgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateReserved":"2024-07-23T13:12:29.654Z"},"containers":{"cna":{"title":"SQLi in Teknogis Informatics' Closed Circuit Vehicle Tracking Software","descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknogis Informatics Closed Circuit Vehicle Tracking Software allows SQL Injection, Blind SQL Injection.\n\nThis issue affects Closed Circuit Vehicle Tracking Software: through 21.11.2024.\n\n\n\n\nNOTE: The vendor was contacted early about this disclosure but did not respond in any way."}],"affected":[{"vendor":"Teknogis Informatics","product":"Closed Circuit Vehicle Tracking Software","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"21.11.2024","versionType":"custom"}]}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-24-1866","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1866","tags":["government-resource"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseSeverity":"HIGH","baseScore":7.5,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","lang":"en","description":"CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","type":"CWE"}]}],"providerMetadata":{"shortName":"TR-CERT","orgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateUpdated":"2026-06-03T11:59:40.019Z"},"impacts":[{"capecId":"CAPEC-66","descriptions":[{"lang":"en","value":"CAPEC-66 SQL Injection"}]},{"capecId":"CAPEC-7","descriptions":[{"lang":"en","value":"CAPEC-7 Blind SQL Injection"}]}],"credits":[{"lang":"en","value":"Yunus ORNEK","type":"finder"}],"source":{"defect":["TR-24-1866"],"advisory":"TR-24-1866","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"teknogis_informatics","product":"close_circuit_vehicle_tracking_software","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThanOrEqual":"21.11.2024","versionType":"custom"}],"cpes":["cpe:2.3:a:teknogis_informatics:close_circuit_vehicle_tracking_software:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-11-21T14:24:04.093097Z","id":"CVE-2024-7026","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-09T16:31:58.161Z"}}]}}}