web-ofisi Vulnerabilities

Browse the latest common vulnerabilities and exposures (CVEs) related to web-ofisi. Use this page to track security alerts, assess risk scores, and find automated remediation steps for web-ofisi products. Stay ahead of zero-day exploits and ensure your systems are patched against known threats.

Total Vulnerabilities

Critical Issues

Average CVSS Score

8.8

Search Results

Showing 1-7 of 7 vulnerabilities

Sort (this page):

Default order is newest first across all pages. Manual sort buttons apply within the current page.

CVE-2019-25461

HIGH

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' parameter. Attackers can send POST requests to the ajax/productsFilterSearch endpoint with malicious 'q' values using time-based blind SQL injection techniques to extract sensitive database information.

Score: 8.8•Published: 2/22/2026

Affected:

web-ofisi/ticaret

8.8

CVE-2019-25460

HIGH

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' GET parameter. Attackers can send requests to the arama endpoint with malicious 'q' values using time-based SQL injection techniques to extract sensitive database information.

Score: 8.8•Published: 2/22/2026

Affected:

web-ofisi/platinum e-ticaret

8.8

CVE-2019-25459

HIGH

Web Ofisi Emlak V2 contains multiple SQL injection vulnerabilities in the endpoint that allow unauthenticated attackers to manipulate database queries through GET parameters. Attackers can inject SQL code into parameters like emlak_durumu, emlak_tipi, il, ilce, kelime, and semt to extract sensitive database information or perform time-based blind SQL injection attacks.

Score: 8.8•Published: 2/22/2026

Affected:

web-ofisi/emlak

8.8

CVE-2019-25458

HIGH

Web Ofisi Firma Rehberi v1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can send requests to with malicious payloads in the 'il', 'kat', or 'kelime' parameters to extract sensitive database information or perform time-based blind SQL injection attacks.

Score: 8.8•Published: 2/22/2026

Affected:

web-ofisi/firma rehberi

8.8

CVE-2019-25457

HIGH

Web Ofisi Firma v13 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'oz' array parameter. Attackers can send GET requests to category pages with malicious 'oz[]' values using time-based blind SQL injection payloads to extract sensitive database information.

Score: 8.8•Published: 2/22/2026

Affected:

web-ofisi/firma

8.8

CVE-2019-25456

HIGH

Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter. Attackers can send requests to with time-based SQL injection payloads to extract sensitive database information or cause denial of service.

Score: 8.8•Published: 2/22/2026

Affected:

web-ofisi/emlak

8.8

CVE-2019-25455

HIGH

Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'a' parameter. Attackers can send GET requests to with malicious 'a' parameter values to extract sensitive database information.

Score: 8.8•Published: 2/22/2026

Affected:

web-ofisi/e-ticaret

8.8