CVE-2019-25456Disclosure(web-ofisi / emlak)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter. Attackers can send requests to with time-based SQL injection payloads to extract sensitive database information or cause denial of service.

web-ofisi CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://www.exploit-db.com/exploits/47141

Other references

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

emlak

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-02-22); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

web-ofisi

Products

emlak

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CRAC Learning - Tech@cracbot223d
Disclosure
CVE-2019-25456 (CVSS:8.8, HIGH) is Analyzed. Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database ..https://nvd.nist.gov/vuln/detail/CVE-2019-25456 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post discloses CVE‑2019‑25456 as an SQL injection flaw in Web Ofisi Emlak v2 that enables unauthenticated database manipulation, with no PoC, exploit, or patch details provided.
0000013
173 followersView on X
CVETodo@CveTodo228d
Disclosure
CVE-2019-25456 pertains to an **SQL injection vulnerability** present in **Web Ofisi Emlak v2**. SQL injection occurs when an application improperly sanitizes user input, allowing attackers to inject malicious SQL code into database queries. In this case, the vulnerability is exploitable via the `ara` GET parameter, which is used to perform search or filter operations within the application. #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution #SQLInjection #PrivilegeEscalation https://cvetodo.com/cve/CVE-2019-25456
Post summary
The post announces a SQL injection vulnerability in Web Ofisi Emlak v2, exploitable via the 'ara' GET parameter, but does not provide PoC, exploit code, or patch information.
0000036
20 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	web-ofisi	emlak	2.0.0	-	-

Explore more

Back to dashboard web-ofisi CVEs emlak vulnerabilities