Security Advisory

CVE-2019-25461

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-22 14:12:15

Last updated 2026-04-07 14:04:21

Assigner VulnCheck

State PUBLISHED

Description

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the q parameter. Attackers can send POST requests to the ajax/productsFilterSearch endpoint with malicious q values using time-based blind SQL injection techniques to extract sensitive database information.

← Browse all CVEs View on cve.org ↗