Approved changes feed: RSS · Atom
cpe:2.3:a:web-ofisi:emlak:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Web Ofisi (801d000b-afe6-53e3-bffe-4ff0dae34adb) |
|---|---|
| Product | Emlak (cabe1336-1625-5c4b-a235-5657d8ce9966) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-25459 |
vulnerable | 2026-06-08 05:13:42.402022 |
Web Ofisi Emlak V2 SQL Injection via emlak-ara.html
CRITICAL (9.8)
Web Ofisi Emlak V2 contains multiple SQL injection vulnerabilities in the endpoint that allow unauthenticated attackers to manipulate database queries through GET parameters. Attackers can inject SQL code into parameters like emlak_durumu, emlak_tipi, il, ilce, kelime, and semt to extract sensitive database information or perform time-based blind SQL injection attacks.
Published: 2026-02-22T14:12:13.169Z
Updated: 2026-04-07T14:04:19.549Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25456 |
vulnerable | 2026-06-08 05:13:42.397241 |
Web Ofisi Emlak v2 SQL Injection via ara Parameter
CRITICAL (9.1)
Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter. Attackers can send requests to with time-based SQL injection payloads to extract sensitive database information or cause denial of service.
Published: 2026-02-22T14:12:10.439Z
Updated: 2026-04-07T14:04:17.209Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.