Products S Store
Monthly
SQL injection in TRtek's Products's Store web application (all versions before build 030631b2) lets remote attackers inject arbitrary SQL through unsanitized input, exposing and altering the backend database. The flaw is unauthenticated and network-reachable with a maximal CVSS of 9.8, though no public exploit or active exploitation has been identified and the product appears to be a niche Turkish commercial application with limited deployment. Coordinated disclosure was handled by Turkey's national CSIRT (TR-CERT / USOM).
SQL injection in TRtek's Products's Store web application (all versions before build 030631b2) lets remote attackers inject arbitrary SQL through unsanitized input, exposing and altering the backend database. The flaw is unauthenticated and network-reachable with a maximal CVSS of 9.8, though no public exploit or active exploitation has been identified and the product appears to be a niche Turkish commercial application with limited deployment. Coordinated disclosure was handled by Turkey's national CSIRT (TR-CERT / USOM).