Read the docs

Web-ofisi

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Web-ofisi records in CISA KEV

No Web-ofisi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
E-ticaret 2 records HIGH Emlak 2 records HIGH Platinum E-ticaret 2 records HIGH Firma 1 record HIGH Firma Rehberi 1 record HIGH

Records

9 records

TI-2019-15512 CVE-2019-25459 · GHSA-w7wm-w9qw-pc72

Web Ofisi Emlak V2 SQL Injection via emlak-ara.html

Priority HIGH 79

Web Ofisi Emlak V2 contains multiple SQL injection vulnerabilities in the endpoint that allow unauthenticated attackers to manipulate database queries through GET parameters.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00503 Published 2026-02-22 No fix listed CWE-89
TI-2019-15511 CVE-2019-25458 · GHSA-q2p9-fpj7-9fjp

Web Ofisi Firma Rehberi v1 SQL Injection via firmalar.html

Priority HIGH 79

Web Ofisi Firma Rehberi v1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00556 Published 2026-02-22 No fix listed CWE-89
TI-2019-15515 CVE-2019-25462 · GHSA-46jj-7w5w-vccv

Web Ofisi Rent a Car v3 SQL Injection via klima Parameter

Priority HIGH 77

Web Ofisi Rent a Car v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'klima' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00304 Published 2026-02-22 No fix listed CWE-89
TI-2019-15514 CVE-2019-25461 · GHSA-982r-pxpw-xv2x

Web Ofisi Platinum E-Ticaret v5 SQL Injection via ajax/productsFilterSearch

Priority HIGH 77

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00422 Published 2026-02-22 No fix listed CWE-89
TI-2019-15513 CVE-2019-25460 · GHSA-jfw2-q9rx-mg64

Web Ofisi Platinum E-Ticaret v5 SQL Injection via q Parameter

Priority HIGH 77

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' GET parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00422 Published 2026-02-22 No fix listed CWE-89
TI-2019-15510 CVE-2019-25457 · GHSA-qx92-pw43-vf25

Web Ofisi Firma v13 SQL Injection via oz Parameter

Priority HIGH 77

Web Ofisi Firma v13 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'oz' array parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00461 Published 2026-02-22 No fix listed CWE-89
TI-2019-15509 CVE-2019-25456 · GHSA-wf2x-4p8v-p7m6

Web Ofisi Emlak v2 SQL Injection via ara Parameter

Priority HIGH 77

Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00539 Published 2026-02-22 No fix listed CWE-89
TI-2019-15508 CVE-2019-25455 · GHSA-22mj-mcf8-h63q

Web Ofisi E-Ticaret v3 SQL Injection via ara.html

Priority HIGH 77

Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'a' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00461 Published 2026-02-22 No fix listed CWE-89
TI-2018-15435 CVE-2018-25210 · GHSA-wqv3-mqhr-hx3m

WebOfisi E-Ticaret 4.0 SQL Injection via urun Parameter

Priority HIGH 77

WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows unauthenticated attackers to manipulate database queries.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00276 Published 2026-03-26 No fix listed CWE-79
Open these records in search →