Vulnerabilidades do Web-ofisi E-ticaret

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Web-ofisi E-ticaret: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:web-ofisi:e-ticaret

CVE-2018-25210 Média · 6.1 CWE-79 26/03/2026

WebOfisi E-Ticaret 4.0 SQL Injection via urun Parameter

WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows unauthenticated attackers to manipulate database queries. Attackers can inject SQL payloads through the 'urun' parameter to execute boolean-based blind, error-based, time-based blind, and stacked query attacks against the backend database.

CVE-2019-25455 Alta · 7.5 CWE-89 22/02/2026

Web Ofisi E-Ticaret v3 SQL Injection via ara.html

Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'a' parameter. Attackers can send GET requests to with malicious 'a' parameter values to extract sensitive database information.