Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2019-25458

Web Ofisi Firma Rehberi v1 SQL Injection via firmalar.html

Description

Web Ofisi Firma Rehberi v1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can send requests to with malicious payloads in the 'il', 'kat', or 'kelime' parameters to extract sensitive database information or perform time-based blind SQL injection attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Web-ofisi Firma Rehberi

  • v1affected

References