PT-2026-24967 · Jettweb · Rent A Car Scripti+1
CVE-2019-25488
·
Publicado
2026-03-12
·
Atualizado
2026-03-12
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Jettweb Hazir Rent A Car Scripti version 4
Description
The software contains multiple SQL injection flaws in the admin panel. Unauthenticated attackers can manipulate database queries through GET parameters. Attackers can inject SQL code into the
tur, id, and ozellikdil parameters of the ''/admin/index.php'' endpoint to extract sensitive database information or cause a denial of service.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Rent A Car Scripti
Php Ready Rent A Car Site Script