{"id":"CVE-2025-7631","state":"PUBLISHED","title":"Time-Based Blind SQLi in Tumeva Internet Technologies' Tumeva Prime News Software","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tumeva Internet Technologies Software Information Advertising and Consulting Services Trade Ltd. Co. Tumeva Prime News Software allows SQL Injection.\n\nThis issue affects Tumeva Prime News Software: from v.1.0.1 before v1.0.2.","publishedAt":"2026-02-17T11:36:50.587Z","updatedAt":"2026-06-05T13:44:25.667Z","severity":{"score":8.6,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","source":"TR-CERT"},"assigner":"TR-CERT","products":["Tumeva Internet Technologies Software Information Advertising and Consulting Services Trade Ltd. Co. Tumeva Prime News Software"],"affected":[{"vendor":"Tumeva Internet Technologies Software Information Advertising and Consulting Services Trade Ltd. Co.","product":"Tumeva Prime News Software","defaultStatus":"unaffected","versions":[{"version":"v.1.0.1","status":"affected","lessThan":"v1.0.2","versionType":"custom"}]}],"references":["https://www.usom.gov.tr/bildirim/tr-26-0067","https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0067"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T20:10:04.440Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/7xxx/CVE-2025-7631.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-7631","state":"PUBLISHED","datePublished":"2026-02-17T11:36:50.587Z","dateUpdated":"2026-06-05T13:44:25.667Z","assignerShortName":"TR-CERT","assignerOrgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateReserved":"2025-07-14T09:03:32.705Z"},"containers":{"cna":{"title":"Time-Based Blind SQLi in Tumeva Internet Technologies' Tumeva Prime News Software","descriptions":[{"lang":"en","value":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tumeva Internet Technologies Software Information Advertising and Consulting Services Trade Ltd. Co. Tumeva Prime News Software allows SQL Injection.\n\nThis issue affects Tumeva Prime News Software: from v.1.0.1 before v1.0.2."}],"affected":[{"vendor":"Tumeva Internet Technologies Software Information Advertising and Consulting Services Trade Ltd. Co.","product":"Tumeva Prime News Software","defaultStatus":"unaffected","versions":[{"version":"v.1.0.1","status":"affected","lessThan":"v1.0.2","versionType":"custom"}]}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-26-0067","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0067","tags":["government-resource"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"HIGH","baseSeverity":"HIGH","baseScore":8.6,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","lang":"en","description":"CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')","type":"CWE"}]}],"providerMetadata":{"shortName":"TR-CERT","orgId":"ca940d4e-fea4-4aa2-9a58-591a58b1ce21","dateUpdated":"2026-06-05T13:44:25.667Z"},"datePublic":"2026-02-17T11:33:00.000Z","impacts":[{"capecId":"CAPEC-66","descriptions":[{"lang":"en","value":"CAPEC-66 SQL Injection"}]}],"credits":[{"lang":"en","value":"Çetin BİNİCİ","type":"finder"}],"source":{"defect":["TR-26-0066"],"advisory":"TR-26-0066","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.5.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-02-17T14:23:54.401501Z","id":"CVE-2025-7631","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-17T14:25:40.680Z"}}]}}}