Web Ofisi E-Ticaret SQL Injection Vulnerability

A SQL injection vulnerability has been identified in Web Ofisi E-Ticaret version 3. This vulnerability allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'a' parameter in GET requests. Exploitation of this vulnerability could lead to the extraction of sensitive information from the database.

Impact

Exploitation of this vulnerability allows for unauthorized SQL injection, potentially leading to unauthorized data access or manipulation within the application's database.

Reproduction

To reproduce this vulnerability, send a GET request to 'ara.html' with a crafted 'a' parameter value that includes SQL injection payloads. The application does not properly sanitize the input, allowing the injected SQL code to be executed by the database.