{"id":"CVE-2024-9286","aliases":["EUVD-2024-50304","GHSA-75q8-cc48-hx9g"],"status":"published","title":"SQLi in TRtek Software's Distant Education Platform","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TRtek Software Distant Education Platform allows SQL Injection, Parameter Injection.\n\nThis issue affects Distant Education Platform: before 3.2024.11.","severity":{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00365,"percentile":0.30599,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-89"],"published":"2024-10-09T13:13:44Z","modified":"2026-06-17T08:24:17Z","products":[{"vendor":"trtek software","product":"distant education platform"},{"vendor":"trtek_software","product":"distant_education_platform"}],"references":[{"url":"https://www.usom.gov.tr/bildirim/tr-24-1649","tags":["government-resource","broken-link"]},{"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1649","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-9286"},{"url":"https://github.com/advisories/GHSA-75q8-cc48-hx9g"}],"sources":{"cve":[{"id":"CVE-2024-9286","title":"SQLi in TRtek Software's Distant Education Platform","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TRtek Software Distant Education Platform allows SQL Injection, Parameter Injection.\n\nThis issue affects Distant Education Platform: before 3.2024.11.","status":"published","published":"2024-10-09T13:13:44.499Z","modified":"2026-06-02T07:46:45.635Z","cvss":[{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:34:05.823187Z"}],"euvd":[{"id":"EUVD-2024-50304","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TRtek Software Distant Education Platform allows SQL Injection, Parameter Injection.\n\nThis issue affects Distant Education Platform: before 3.2024.11.","status":"published","published":"2024-10-09T13:13:44Z","modified":"2026-06-02T07:46:45Z","cvss":[{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T18:20:56.977213Z"}],"ghsa":[{"id":"GHSA-75q8-cc48-hx9g","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Improper...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Improper Input Validation vulnerability in TRtek Software Distant Education Platform allows SQL Injection, Parameter Injection.This issue affects Distant Education Platform: before 3.2024.11.","status":"published","published":"2024-10-09T15:32:20Z","modified":"2026-06-02T09:37:16Z","cvss":[{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":0,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N","level":"none"}],"cwes":["CWE-20","CWE-89"],"updated_at":"2026-11-02T15:08:28.702463Z"}],"nvd":[{"id":"CVE-2024-9286","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TRtek Software Distant Education Platform allows SQL Injection, Parameter Injection.\n\nThis issue affects Distant Education Platform: before 3.2024.11.","status":"published","published":"2024-10-09T14:15:07.823Z","modified":"2026-06-17T08:24:17.157Z","cvss":[{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:10:31.271525Z"}]}}