8
CVEs
3
Critical
5
High
0
KEV
8
PoC
8
Unpatched C/H
0.0%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
3
HIGH
5
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (6)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2019-25458 | SQL injection in Web Ofisi Firma Rehberi v1. PoC available. | CRITICAL | 9.8 | 0.1% | 69 |
PoC
No patch
|
| CVE-2019-25459 | Multiple SQL injections in Web Ofisi Emlak V2. PoC available. | CRITICAL | 9.8 | 0.1% | 69 |
PoC
No patch
|
| CVE-2019-25456 | SQL injection in Web Ofisi Emlak v2. PoC available. | CRITICAL | 9.1 | 0.1% | 66 |
PoC
No patch
|
| CVE-2018-25210 | WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows unauthenticated attackers to manipulate database queries. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | HIGH | 8.8 | 0.1% | 64 |
PoC
No patch
|
| CVE-2019-25455 | Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'a' parameter. Attackers can send GET requests to with malicious 'a' parameter values to extract sensitive database information. [CVSS 7.5 HIGH] | HIGH | 7.5 | 0.1% | 58 |
PoC
No patch
|
| CVE-2019-25457 | Web Ofisi Firma v13 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'oz' array parameter. [CVSS 7.5 HIGH] | HIGH | 7.5 | 0.1% | 58 |
PoC
No patch
|
| CVE-2019-25460 | Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' GET parameter. [CVSS 7.5 HIGH] | HIGH | 7.5 | 0.1% | 58 |
PoC
No patch
|
| CVE-2019-25461 | Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' parameter. [CVSS 7.5 HIGH] | HIGH | 7.5 | 0.1% | 58 |
PoC
No patch
|