Web-ofisi E-ticaret vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Web-ofisi E-ticaret: 2 record(s), with affected versions and fixes.
cpe:2.3:a:web-ofisi:e-ticaret

CVE-2018-25210 Medium · 6.1 CWE-79 Mar 26, 2026

WebOfisi E-Ticaret 4.0 SQL Injection via urun Parameter

WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows unauthenticated attackers to manipulate database queries. Attackers can inject SQL payloads through the 'urun' parameter to execute boolean-based blind, error-based, time-based blind, and stacked query attacks against the backend database.

CVE-2019-25455 High · 7.5 CWE-89 Feb 22, 2026

Web Ofisi E-Ticaret v3 SQL Injection via ara.html

Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'a' parameter. Attackers can send GET requests to with malicious 'a' parameter values to extract sensitive database information.