Web Ofisi

CVE-2018-25210 Mar 26, 11:39 HIGH POC This Week

WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows unauthenticated attackers to manipulate database queries. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2019-25461 Feb 22, 15:16 HIGH POC This Week

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' parameter. [CVSS 7.5 HIGH]

CVE-2019-25460 Feb 22, 15:16 HIGH POC This Week

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' GET parameter. [CVSS 7.5 HIGH]

CVE-2019-25459 Feb 22, 15:16 CRITICAL POC Act Now

Multiple SQL injections in Web Ofisi Emlak V2. PoC available.

CVE-2019-25458 Feb 22, 15:16 CRITICAL POC Act Now

SQL injection in Web Ofisi Firma Rehberi v1. PoC available.

CVE-2019-25457 Feb 22, 15:16 HIGH POC This Week

Web Ofisi Firma v13 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'oz' array parameter. [CVSS 7.5 HIGH]

CVE-2019-25456 Feb 22, 15:16 CRITICAL POC Act Now

SQL injection in Web Ofisi Emlak v2. PoC available.

CVE-2019-25455 Feb 22, 15:16 HIGH POC This Week

Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'a' parameter. Attackers can send GET requests to with malicious 'a' parameter values to extract sensitive database information. [CVSS 7.5 HIGH]