Mert Turan

URL redirection to untrusted site ('open redirect') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows Fake the Source of Data. This issue affects Access Control System: before Versiyon 2.

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Armiya Information Technologies Ltd. Co. Access Control System allows SQL Injection. This issue affects Access Control System: before Versiyon 2.

**Name of the Vulnerable Software and Affected Versions** Access Control System (GKS) versions prior to 2 **Description** Improper neutralization of input during web page generation allows Reflected Cross-Site Scripting (XSS), a flaw where malicious scripts are reflected off a web application to the victim's browser. **Recommendations** Update Access Control System (GKS) to version 2 or later.

**Name of the Vulnerable Software and Affected Versions** Access Control System (GKS) versions prior to 2 **Description** Improper neutralization of script-related HTML tags in a web page leads to a basic Cross-Site Scripting (XSS) issue. This allows for XSS targeting HTML attributes. **Recommendations** Update Access Control System (GKS) to version 2 or later.

**Name of the Vulnerable Software and Affected Versions** Armiya Information Technologies Ltd. Co. Access Control System (GKS) versions prior to 2 **Description** A missing authorization issue allows the collection of data from common resource locations. **Recommendations** Update Armiya Information Technologies Ltd. Co. Access Control System (GKS) to version 2 or later.

**Name of the Vulnerable Software and Affected Versions** Armiya Information Technologies Ltd. Co. Access Control System (GKS) versions prior to 2 **Description** Improper neutralization of input during web page generation allows for Stored Cross-Site Scripting (XSS), a condition where malicious scripts are permanently stored on the target server and later executed in the browser of a user visiting the affected page. **Recommendations** Update Armiya Information Technologies Ltd. Co. Access Control System (GKS) to version 2 or later.

**Name of the Vulnerable Software and Affected Versions** Turboard versions 2025.07 through 11022026 **Description** The software contains an Improper Neutralization of Input During Web Page Generation issue, specifically a Reflected Cross-site Scripting (XSS) condition. The vendor was contacted regarding this disclosure but did not respond. **Recommendations** Update Turboard to a version newer than 11022026.