Approved changes feed: RSS · Atom

cpe:2.3:a:centralsquare:etrakit.net:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCentralsquare (4e8986bf-b3e1-5c42-b303-f23515ce162f)
ProductEtrakit.Net (0652e1e3-b413-5504-a86a-5f71b48a1faa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-29980 vulnerable 2026-06-08 07:14:57.239532 Blind SQL Injection vulnerability in eTRAKiT.Net
CRITICAL (9.8)
A SQL injection issue has been discovered in eTRAKiT.net release 3.2.1.77. Due to improper input validation, a remote unauthenticated attacker can run arbitrary commands as the current MS SQL server account. It is recommended that the CRM feature is turned off while on eTRAKiT.net release 3.2.1.77. eTRAKiT.Net is no longer supported, and users are recommended to migrate to the latest version of CentralSquare Community Development.
Published: 2025-03-20T19:03:05.501Z
Updated: 2025-04-07T20:37:39.482Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.