CVE-2025-11253
published 2025-10-24CVE-2025-11253: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aksis Technology Inc. Netty ERP allows SQL Injection…
PriorityP263critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.40%
31.3th percentile
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aksis Technology Inc. Netty ERP allows SQL Injection.
This issue affects Netty ERP: before V.1.1000.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| aksis_technology_inc | netty_erp | < V.1.1000 | V.1.1000 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Aksis Netty ERP prior 1.1000 sql injection
vuldb·2026-06-04·CVSS 9.8
CVE-2025-11253 [CRITICAL] Aksis Netty ERP prior 1.1000 sql injection
A vulnerability labeled as critical has been found in Aksis Netty ERP. This affects an unknown function. The manipulation results in sql injection.
This vulnerability is identified as CVE-2025-11253. The attack can be executed remotely. There is not any exploit available.
The affected component should be upgraded.
GHSA
GHSA-fqgh-c6pc-p3m8: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aksis Technology Inc
ghsa_unreviewed·2025-10-24
CVE-2025-11253 [CRITICAL] CWE-89 GHSA-fqgh-c6pc-p3m8: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aksis Technology Inc
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aksis Technology Inc. Netty ERP allows SQL Injection.This issue affects Netty ERP: before V.1.1000.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-10-24
Published