What’s Vulnerable › Vulnerabilities

CVE-2025-5319: SQLi in Emit Informatics' DIGITA Efficiency Management System

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-03 · updated 2026-06-17
• Weakness: CWE-89

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Emit Informatics and Communication Technologies Industry and Trade Ltd. Co. DIGITA Efficiency Management System allows SQL Injection. This issue affects DIGITA Efficiency Management System: through 03022026.  NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

• Emit Informatics and Communication Technologies Industry and Trade Ltd. Co. DIGITA Efficiency Management System: through 03022026

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0016
• https://www.usom.gov.tr/bildirim/tr-26-0016

Get alerted when CVE-2025-5319 or the next vulnerability affects your stack