CVE-2025-4738

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yirmibes Software MY ERP allows SQL Injection.

This issue affects MY ERP: before 1.170.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
Yirmibes SoftwareMY ERP< 1.170

References

Timeline

Published
Jun 19, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-473807.8Memory corruption while preprocessing IOCTLs in sensors.CVE-2025-473817.8Memory Corruption while processing IOCTL calls when concurrent access to shared buffer occurs.CVE-2025-473827.8Memory corruption while loading an invalid firmware in boot loader.CVE-2025-473837.2Weak configuration may lead to cryptographic issue when a VoWiFi call is triggered from UE.CVE-2025-473846.5Transient DOS when MAC configures config id greater than supported maximum value.CVE-2025-473857.8Memory Corruption when accessing trusted execution environment without proper privilege check.CVE-2025-473867.8Memory Corruption while invoking IOCTL calls when concurrent access to shared buffer occurs.CVE-2025-473877.8Memory Corruption when processing IOCTLs for JPEG data without verification.CVE-2025-473887.8Memory corruption while passing pages to DSP with an unaligned starting address.CVE-2025-473897.8Memory corruption when buffer copy operation fails due to integer overflow during attestation report generation.CVE-2025-47399.8A vulnerability was found in projectworlds Hospital Database Management System 1.0. It has been classified as critical. This affects an unknCVE-2025-473907.8Memory corruption while preprocessing IOCTL request in JPEG driver.
CVE-2025-4738: Critical severity, CVSS 9.8 | Vulnix