Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2025-15024

Improper Control of Generation of Code ('Code Injection') vulnerability in Yordam Information Technology Consulting, Training and Electronic Systems Industry and Trade Inc. Library Automation System allows Remote Code Inclusion. This issue affects Library Automation System: from v.19.5 before v.22.1.

VectorNETWORK

PublishedMay 14, 2026, 18:16

Published Byiletisim@usom.gov.tr

Base Score

Score8.8

Affected Versions

No affected versions found.

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0240

Weakness Type

CWE-94

CVSS Metrics

Base Score

8.8

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK