Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'a' parameter. Attackers can send GET requests to with malicious 'a' parameter values to extract sensitive database information.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-02-22 | 1 | Disclosure1 |
| 2026-02-27 | 1 | Disclosure1 |
| 2026-03-23 | 1 | General1 |
📌 Top CVEs recientes (CVSS>=7.0): 1. 💉 CVE-2019-25455 (CVSS: 7.5) 2. 💉 CVE-2019-25452 (CVSS: 7.5) 3. 💉 CVE-2019-25450 (CVSS: 7.5) 4. 💉 CVE-2019-25446 (CVSS: 8.2) 5. 💉 CVE-2019-25443 (CVSS: 8.2) #CyberSecurity #CVE #Infosec
Post summary
The post lists several recent high‑CVSS CVEs without any additional context on exploitation, patches, or PoCs, simply highlighting their severity ratings.
CVE-2019-25455 (CVSS:8.8, HIGH) is Analyzed. Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate datab..https://nvd.nist.gov/vuln/detail/CVE-2019-25455 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet announces that Web Ofisi E‑Ticaret v3 has a high‑severity SQL injection vulnerability (CVE‑2019‑25455) and directs readers to the NVD for details.
CVE-2019-25455 pertains to an **SQL Injection vulnerability** present in **Web Ofisi E-Ticaret v3**. SQL injection occurs when an application improperly sanitizes user input, allowing attackers to inject malicious SQL code into database queries. In this case, the vulnerability exists in the handling of the `a` parameter, which is passed via GET requests. #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution #SQLInjection #PrivilegeEscalation https://cvetodo.com/cve/CVE-2019-25455
Post summary
The post announces a SQL injection vulnerability in Web Ofisi E‑Ticaret v3, detailing the affected parameter and request method, but does not provide PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | web-ofisi | e-ticaret | 3.0.0 | - | - |