CVE Intelligence
Analysis AI-assisted

CVE-2025-5329: Martcode Delta Course Automation - SQL Injection

An SQL injection weakness (CWE-89) affects Martcode Software Inc. Delta Course Automation through 04022026, as reported in a record published by the Turkish CNA USOM. The CNA assigned a CVSS 3.1 base score of 9.8, but the record lists no affected or fixed version details, and the vendor did not respond to early disclosure.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2025-5329 is an SQL injection weakness (CWE-89) reported in Martcode Software Inc. Delta Course Automation. The record describes improper neutralization of special elements in an SQL command, which can allow SQL injection. The CNA is USOM, and the record is marked as Deferred. See the USOM notice and the Siber Guvenlik notice.

Impact

  • The CNA assigned a CVSS 3.1 base score of 9.8 with vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, which indicates network attack vector, low complexity, no privileges or user interaction, and high impact on confidentiality, integrity and availability.
  • SQL injection weaknesses generally allow manipulation of database queries, which may expose or alter stored data. This is an inference from the weakness class, not a confirmed effect in this product.

Affected products and versions

  • The record names Delta Course Automation through 04022026 as affected.
  • The record contains no structured list of affected or fixed versions.

Exploitation status

  • The record shows the CVE is not listed in the CISA KEV catalog. No confirmed exploitation appears in the sources consulted.

Remediation and mitigation

  • No fixed version is identified in the record. Because the vendor did not respond to early disclosure, administrators should check with the vendor or the CNA whether an update exists.
  • Limit network exposure of the application, place it behind access controls, and restrict database account privileges to what the application requires.
  • If the software is customized in-house, review data access code for input validation and use of parameterized queries.

Detection guidance

  • Review web application and database logs for unusual query errors, malformed input in request parameters, and unexpected database activity.
  • Monitor for unexpected changes to course, user or account data.

Limitations of the available information

  • The record has no structured affected version list, no fixed version, no EPSS score and no SSVC data.
  • The title field in the record is empty; the title on this page is derived from the description.
  • The vendor did not respond to disclosure, and the record is marked Deferred.
  • The vulnerable parameter, endpoint and exact exploitation conditions are not described in the sources consulted.

Frequently asked questions

What is CVE-2025-5329?

It is an SQL injection weakness (CWE-89) in Martcode Software Inc. Delta Course Automation, as described in the record published by the CNA USOM.

Is there a fix for this vulnerability?

The record does not identify a fixed version. The vendor did not respond to early disclosure, so check with the vendor or the CNA for any update.

Is this vulnerability being actively exploited?

The record shows it is not listed in the CISA KEV catalog. No confirmed exploitation appears in the sources consulted.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.