What is GHSA-8m3g-w86x-w9wc?

GHSA-8m3g-w86x-w9wc is a security advisory published by GitHub Security Advisories with High severity. Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

Which CVE IDs does GHSA-8m3g-w86x-w9wc cover?

GHSA-8m3g-w86x-w9wc covers the following CVE IDs: CVE-2025-4686. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8m3g-w86x-w9wc?

GHSA-8m3g-w86x-w9wc has a CVSS v3 base score of 8.6, published by GitHub Security Advisories.

GHSA-8m3g-w86x-w9wcHighCVSS 8.6

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...

Vendor

GitHub Security Advisories

Published

January 30, 2026

Last Modified

June 5, 2026

🔗 CVE IDs covered (1)

CVE-2025-4686 →

📋 Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kodmatic Computer Software Tourism Construction Industry and Trade Ltd. Co. Online Exam and Assessment allows SQL Injection.This issue affects Online Exam and Assessment: through 30012026.

NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-4686
https://www.usom.gov.tr/bildirim/tr-26-0010
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0010
https://github.com/advisories/GHSA-8m3g-w86x-w9wc