Bypass

Name of the Vulnerable Software and Affected Versions: Webyapar version 2.0 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via two parameters: `kat id` in the default URI during a download action, and `id` in the default URI during a duyurular detay action. Recommendations: For Webyapar version 2.0, consider restricting access to the default URI for download and duyurular detay actions until a patch is available. As a temporary workaround, avoid using the `kat id` and `id` parameters in these actions to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.