This vulnerability is an SQL injection flaw where The weakness is classified as CWE‑89.

Inrove Software and Internet Services' e-commerce platform BiEticaret is affected. All releases before version 3.3.57 contain the vulnerability; it is not specified whether a patch is available for earlier versions.

The CVSS base score of 9.8 denotes critical severity, while the EPSS score of less than 1% indicates a very low probability of exploitation in the wild at present. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote through the web interface where untrusted input is accepted; this inference is based on the nature of SQL injection vulnerabilities noted in the description. special conditions beyond normal user access are required, making exploitation straightforward for a determined adversary.