CVE-2024-13148 describes an SQL Injection vulnerability (CWE-89) in the Yukseloglu Filter B2B Login Platform prior to version 16.01.2025. The vulnerability arises from improper neutralization of special elements in SQL commands, allowing unauthenticated remote attackers to inject malicious SQL code. The CVSS 3.1 base score is 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been disclosed, and the product is not a cloud service.

Successful exploitation could allow remote attackers to execute arbitrary SQL commands on the backend database without authentication, leading to full compromise of data confidentiality, integrity, and availability within the affected B2B Login Platform. This could result in unauthorized data access, data modification, or denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should apply any recommended temporary mitigations from the vendor if available. Given the critical severity and lack of patch, restricting network access to the affected platform and monitoring for suspicious activity are prudent interim measures.