Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows unauthenticated attackers to manipulate database queries. Attackers can inject SQL payloads through the 'urun' parameter to execute boolean-based blind, error-based, time-based blind, and stacked query attacks against the backend database.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2018-25210 - WebOfisi E-Ticaret 4.0 SQL Injection via urun Parameter Intel Report: https://ift.tt/xpyEaAQ
Post summary
Alert announces CVE-2018-25210, a SQL injection vulnerability in WebOfisi E-Ticaret 4.0 via the 'urun' parameter, with an Intel report link provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | web-ofisi | e-ticaret | - | - | - |