Lucene search
K

11 matches found

RedhatCVE
RedhatCVE
added 2026/02/23 7:25 p.m.6 views

CVE-2019-25456

Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter. Attackers can send requests to with time-based SQL injection payloads to extract sensitive database information or...

9.1CVSS5.7AI score0.00464EPSS
Exploits1References1
Cvelist
Cvelist
added 2026/02/22 2:12 p.m.26 views

CVE-2019-25456 Web Ofisi Emlak v2 SQL Injection via ara Parameter

Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter. Attackers can send requests to with time-based SQL injection payloads to extract sensitive database information or...

9.1CVSS0.00464EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/02/22 2:12 p.m.5 views

CVE-2019-25456

Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter. Attackers can send requests to with time-based SQL injection payloads to extract sensitive database information or...

8.8CVSS6AI score0.00464EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/02/22 2:12 p.m.2 views

CVE-2019-25456 Web Ofisi Emlak v2 SQL Injection via ara Parameter

Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter. Attackers can send requests to with time-based SQL injection payloads to extract sensitive database information or...

9.1CVSS5.8AI score0.00464EPSS
Exploits1References3
CVE
CVE
added 2026/02/22 2:12 p.m.11 views

CVE-2019-25456

Web Ofisi Emlak v2 contains an SQL injection vulnerability exploitable via the ara GET parameter. Unauthenticated attackers can send time-based payloads to manipulate queries, potentially extracting sensitive data and causing denial of service. No remediation details are provided in the supplied ...

9.1CVSS6AI score0.00464EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2026/02/22 12:0 a.m.8 views

Web Ofisi Emlak SQL注入漏洞

Web Ofisi Emlak is a real estate agency website system developed by the Turkish company Web Ofisi. The Web Ofisi Emlak v2 version has a SQL injection vulnerability, which stems from insufficient validation of the ara parameter input. This vulnerability may lead to SQL injection attacks...

9.1CVSS5.8AI score0.00464EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2007-3300

Malware in sbrugna...

4.3CVSS6.4AI score0.03182EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2008/01/08 11:46 a.m.1 views

CVE-2007-6673

Cross-site scripting XSS vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HTML via the ara parameter to the default URI under Ara/ in a search action...

4.3CVSS5.7AI score0.01489EPSS
Exploits1References5
Prion
Prion
added 2008/01/08 11:46 a.m.9 views

Cross site scripting

Cross-site scripting XSS vulnerability in Makale Scripti allows remote attackers to inject arbitrary web script or HTML via the ara parameter to the default URI under Ara/ in a search action...

4.3CVSS6.2AI score0.01489EPSS
Exploits1References4
CVE
CVE
added 2007/07/04 4:0 p.m.104 views

CVE-2007-3561

CVE-2007-3561 describes a cross-site scripting (XSS) vulnerability in the ara.asp page of Efendy Blog 1.0. The issue allows remote attackers to inject arbitrary web script or HTML via the ara parameter. Exploitation details, affected versions, and remediation are not provided in the connected doc...

4.3CVSS5.6AI score0.01033EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2007/06/21 1:30 a.m.15 views

CVE-2007-3310

Cross-site scripting XSS vulnerability in arama.asp in TDizin allows remote attackers to inject arbitrary web script or HTML via the ara parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.6AI score0.03182EPSS
Exploits1References4
Rows per page
Query Builder