PT-2026-24973 · Jettweb · Hazir Haber Sitesi Scripti+1
CVE-2019-25513
·
Publicado
2026-03-12
·
Atualizado
2026-03-12
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Jettweb PHP Hazir Haber Sitesi Scripti versions 3.0 through 3.0
Description
The software contains a SQL injection flaw that allows unauthenticated attackers to manipulate database queries. This is achieved by injecting SQL code through the
q parameter. Attackers can send GET requests to the ''datagetir.php'' endpoint with malicious q values, utilizing time-based blind SQL injection techniques to extract sensitive database information or bypass authentication.Recommendations
Versions prior to 3.0 should be used.
Exploit
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Hazir Haber Sitesi Scripti
Php Stock News Site Script