CVE-2025-2812: Mydata Ticket Sales Automation

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mydata Informatics Ticket Sales Automation allows Blind SQL Injection. This issue affects Ticket Sales Automation: before 03.04.2025 (DD.MM.YYYY).

Affected products

• Mydata Ticket Sales Automation: before 2025-04-03 (fixed in 2025-04-03)

Published 2025-05-02. Last modified 2026-06-17.