CVE-2019-25460

Publication date

2026-02-22 14:12:14

Family

VulnCheck

State

PUBLISHED

Description

Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the q GET parameter. Attackers can send requests to the arama endpoint with malicious q values using time-based SQL injection techniques to extract sensitive database information.