CVE-2025-6919

CriticalCVSS 9.8/10Last modified Oct 8, 2026

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cats Information Technology Software Development Technologies Aykome License Tracking System allows SQL Injection.

This issue affects Aykome License Tracking System: before Version dated 06.10.2025.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Oct 13, 2025
Last modified: Oct 8, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-691907.3Missing Authorization vulnerability in e-plugins Listihub listihub allows Exploiting Incorrectly Configured Access Control Security Levels.T CVE-2025-691917.3Missing Authorization vulnerability in e-plugins ListingHub listinghub allows Exploiting Incorrectly Configured Access Control Security Leve CVE-2025-691927.3Missing Authorization vulnerability in e-plugins Real Estate Pro real-estate-pro allows Exploiting Incorrectly Configured Access Control Sec CVE-2025-691937.3Missing Authorization vulnerability in e-plugins WP Membership wp-membership allows Exploiting Incorrectly Configured Access Control Securit CVE-2025-691949.8A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provide CVE-2025-691958.8A flaw was found in GNU Wget2. This vulnerability, a stack-based buffer overflow, occurs in the filename sanitization logic when processing CVE-2025-691966.5FastMCP is the standard framework for building MCP applications. Prior to version 2.14.2, the server does not properly respect the resource CVE-2025-691976.5Pterodactyl is a free, open-source game server management panel. Versions 1.11.11 and below allow TOTP to be used multiple times during its CVE-2025-691986.5Pterodactyl is a free, open-source game server management panel. Pterodactyl implements rate limits that are applied to the total number of CVE-2025-691996.5Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to version 1.12.0, websockets wit CVE-2025-69205.3A flaw was found in the authentication enforcement mechanism of a model inference API in ai-inference-server. All /v1/* endpoints are expect CVE-2025-692007.5phpMyFAQ is an open source FAQ web application. In versions prior to 4.0.16, an unauthenticated remote attacker can trigger generation of a