Read the docs

Web-ofisi

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Web-ofisi records in CISA KEV

No Web-ofisi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
E-ticaret 2 records HIGH Emlak 2 records HIGH Platinum E-ticaret 2 records HIGH Firma 1 record HIGH Firma Rehberi 1 record HIGH

Records

2 records in Emlak · all components

TI-2019-15512 CVE-2019-25459 · GHSA-w7wm-w9qw-pc72

Web Ofisi Emlak V2 SQL Injection via emlak-ara.html

Priority HIGH 79

Web Ofisi Emlak V2 contains multiple SQL injection vulnerabilities in the endpoint that allow unauthenticated attackers to manipulate database queries through GET parameters.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00503 Published 2026-02-22 No fix listed CWE-89
TI-2019-15509 CVE-2019-25456 · GHSA-wf2x-4p8v-p7m6

Web Ofisi Emlak v2 SQL Injection via ara Parameter

Priority HIGH 77

Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00539 Published 2026-02-22 No fix listed CWE-89
Open these records in search →