PT-2026-28247 · Web Ofisi · E-Ticaret

CVE-2018-25210 · Publicado 2026-03-26 · Atualizado 2026-03-26

NVD

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows unauthenticated attackers to manipulate database queries. Attackers can inject SQL payloads through the 'urun' parameter to execute boolean-based blind, error-based, time-based blind, and stacked query attacks against the backend database.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-25210

Produtos afetados

E-Ticaret

Referências · 5

• 🔥 https://exploit-db.com/exploits/45897 · Exploit
• https://web-ofisi.com · Nota
• https://drive.google.com/file/d/1ZghFSsYto-Vpv3PXunx8xm2g-Gs3HJwz/view?usp=sharing · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-25210 · Nota de Segurança
• https://vulncheck.com/advisories/webofisi-e-ticaret-sql-injection-via-urun-parameter · Nota