Skip to content
OpenAdvisories

Vendor

Web-ofisi

9 known vulnerabilities.

Products

Ticaret 3 Emlak 2 Rent a Car 1 Ticaret V4 1 Firma 1 Firma Rehberi 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.2
    CVE-2018-25210

    WebOfisi E-Ticaret 4.0 SQL Injection via urun Parameter

    WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows unauthenticated attackers to manipulate database queries. Attackers can inject SQL payloads through the 'urun' parameter to execute boolean-…

    Web-ofisi Ticaret V4
  • High 8.2
    CVE-2019-25462

    Web Ofisi Rent a Car v3 SQL Injection via klima Parameter

    Web Ofisi Rent a Car v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'klima' parameter. Attackers can send GET requests to with malicious 'klima' values to extra…

    Web-ofisi Rent a Car
  • High 7.5
    CVE-2019-25461

    Web Ofisi Platinum E-Ticaret v5 SQL Injection via ajax/productsFilterSearch

    Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' parameter. Attackers can send POST requests to the ajax/productsFilterSearch end…

    Web-ofisi Ticaret
  • High 7.5
    CVE-2019-25460

    Web Ofisi Platinum E-Ticaret v5 SQL Injection via q Parameter

    Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' GET parameter. Attackers can send requests to the arama endpoint with malicious …

    Web-ofisi Ticaret
  • High 7.5
    CVE-2019-25457

    Web Ofisi Firma v13 SQL Injection via oz Parameter

    Web Ofisi Firma v13 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'oz' array parameter. Attackers can send GET requests to category pages with malicious 'oz[]' va…

    Web-ofisi Firma
  • High 7.5
    CVE-2019-25455

    Web Ofisi E-Ticaret v3 SQL Injection via ara.html

    Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'a' parameter. Attackers can send GET requests to with malicious 'a' parameter values to extr…

    Web-ofisi Ticaret