Web Ofisi Emlak SQL Injection Vulnerability

A SQL injection vulnerability has been identified in Web Ofisi Emlak version 2. This vulnerability allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara' GET parameter. Exploitation of this vulnerability can lead to the extraction of sensitive database information or cause a denial-of-service condition.

Impact

Exploitation of this vulnerability allows for time-based SQL injection, where attackers can extract database information or cause a denial-of-service condition by manipulating database queries through the 'ara' GET parameter.

Reproduction

To reproduce this vulnerability, send a request to 'ara.html' with a payload that exploits the SQL injection vulnerability, such as a time-based SQL injection payload. The application is vulnerable if it processes the injected SQL code and returns database information or causes a delay, indicating successful exploitation.