Read the docs

Web-ofisi

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Web-ofisi records in CISA KEV

No Web-ofisi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
E-ticaret 2 records HIGH Emlak 2 records HIGH Platinum E-ticaret 2 records HIGH Firma 1 record HIGH Firma Rehberi 1 record HIGH

Records

2 records in E-ticaret · all components

TI-2019-15508 CVE-2019-25455 · GHSA-22mj-mcf8-h63q

Web Ofisi E-Ticaret v3 SQL Injection via ara.html

Priority HIGH 77

Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'a' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00461 Published 2026-02-22 No fix listed CWE-89
TI-2018-15435 CVE-2018-25210 · GHSA-wqv3-mqhr-hx3m

WebOfisi E-Ticaret 4.0 SQL Injection via urun Parameter

Priority HIGH 77

WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows unauthenticated attackers to manipulate database queries.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00276 Published 2026-03-26 No fix listed CWE-79
Open these records in search →