CVE-2019-25456

Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter. Attackers can send requests to with time-based SQL injection payloads to extract sensitive database information or...

CVE-2019-25456

Web Ofisi Emlak v2 contains an SQL injection vulnerability exploitable via the ara GET parameter. Unauthenticated attackers can send time-based payloads to manipulate queries, potentially extracting sensitive data and causing denial of service. No remediation details are provided in the supplied ...

CVE-2019-25456

Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter. Attackers can send requests to with time-based SQL injection payloads to extract sensitive database information or...

CVE-2019-25456 Web Ofisi Emlak v2 SQL Injection via ara Parameter

Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter. Attackers can send requests to with time-based SQL injection payloads to extract sensitive database information or...

CVE-2019-25456 Web Ofisi Emlak v2 SQL Injection via ara Parameter

Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter. Attackers can send requests to with time-based SQL injection payloads to extract sensitive database information or...

Web Ofisi Emlak SQL注入漏洞

Web Ofisi Emlak is a real estate agency website system developed by the Turkish company Web Ofisi. The Web Ofisi Emlak v2 version has a SQL injection vulnerability, which stems from insufficient validation of the ara parameter input. This vulnerability may lead to SQL injection attacks...

CVE-2019-25456: Improper Neutralization of Special Elements used in an SQL Command

Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter. Attackers can send requests to with time-based SQL injection payloads to extract sensitive database information or...

EUVD-2007-3300

Malware in sbrugna...

CVE-2007-6673

Cross-site scripting XSS vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HTML via the ara parameter to the default URI under Ara/ in a search action...

Cross site scripting

Cross-site scripting XSS vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HTML via the ara parameter to the default URI under Ara/ in a search action...

CVE-2007-6673: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HTML via the ara parameter to the default URI under Ara/ in a search action...

CVE-2007-3561

CVE-2007-3561 describes a cross-site scripting (XSS) vulnerability in the ara.asp page of Efendy Blog 1.0. The issue allows remote attackers to inject arbitrary web script or HTML via the ara parameter. Exploitation details, affected versions, and remediation are not provided in the connected doc...

CVE-2007-3561: Undefined Security Weakness

Cross-site scripting XSS vulnerability in ara.asp in Efendy Blog 1.0 allows remote attackers to inject arbitrary web script or HTML via the ara parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3310

Cross-site scripting XSS vulnerability in arama.asp in TDizin allows remote attackers to inject arbitrary web script or HTML via the ara parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-3310: Undefined Security Weakness

Cross-site scripting XSS vulnerability in arama.asp in TDizin allows remote attackers to inject arbitrary web script or HTML via the ara parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...