Web-ofisi Firma Rehberi vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Web-ofisi Firma Rehberi: 1 record(s), with affected versions and fixes.cpe:2.3:a:web-ofisi:firma_rehberi
CVE-2019-25458
Critical · 9.8
CWE-89 Feb 22, 2026
Web Ofisi Firma Rehberi v1 SQL Injection via firmalar.html
Web Ofisi Firma Rehberi v1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can send requests to with malicious payloads in the 'il', 'kat', or 'kelime' parameters to extract sensitive database information or perform time-based blind SQL injection attacks.