PT-2026-21443 · Unknown · Web Ofisi Emlak Version 2

Published 2026-02-22 · Updated 2026-02-22 · CVE-2019-25456

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Web Ofisi Emlak version 2

Description The software contains an SQL injection flaw. Unauthenticated attackers can manipulate database queries by injecting SQL code through the ara GET parameter. Attackers can use time-based SQL injection payloads to extract sensitive database information or cause a denial of service.

Recommendations Apply any available updates or patches for Web Ofisi Emlak version 2. As a temporary workaround, restrict access to the ara GET parameter.

Exploit

Fix

DoS

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-25456

Affected Products

Web Ofisi Emlak Version 2

References · 7

• 🔥 https://exploit-db.com/exploits/47141 · Exploit
• https://osv.dev/vulnerability/CVE-2019-25456 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-25456 · Security Note
• https://t.me/CVEtracker/45448 · Telegram Post
• https://t.me/cveNotify/152784 · Telegram Post
• https://vulncheck.com/advisories/web-ofisi-emlak-sql-injection-via-ara-parameter · Note
• https://web-ofisi.com/detay/emlak-scripti-v2.html · Note