Site Management Panel
Monthly
SQL injection in Ankara Hosting's Site Management Panel through version 15062026 enables authenticated remote attackers to manipulate backend database queries with full impact on confidentiality, integrity, and availability. The CVSS score of 8.8 (PR:L) reflects that low-privilege panel credentials are required but attack complexity is minimal once access is obtained. No public exploit code or CISA KEV listing has been identified at the time of analysis, though the Turkish CERT (TR-CERT) has published an advisory.
SQL injection in Ankara Hosting's Site Management Panel through version 15062026 enables authenticated remote attackers to manipulate backend database queries with full impact on confidentiality, integrity, and availability. The CVSS score of 8.8 (PR:L) reflects that low-privilege panel credentials are required but attack complexity is minimal once access is obtained. No public exploit code or CISA KEV listing has been identified at the time of analysis, though the Turkish CERT (TR-CERT) has published an advisory.