WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows unauthenticated attackers to manipulate d…

WebOfisi E-Ticaret 4.0 contains a critical SQL injection vulnerability in the 'urun' GET parameter that allows unauthenticated attackers to manipulate database queries. The vulnerability enables multiple attack vectors including boolean-based blind, error-based, time-based blind, and stacked query attacks against the backend database. This represents a high-severity security flaw that could lead to unauthorized data access, modification, or extraction from the affected e-commerce platform.