Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauthenticated attackers to manipulate database queries through GET parameters. Attackers can inject SQL code into the 'tur', 'id', and 'ozellikdil' parameters of the admin/index.php endpoint to extract sensitive database information or cause denial of service.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2019-25488 Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauthenticated attackers to manipulate database que… https://www.cve.org/CVERecord?id=CVE-2019-25488
Post summary
CVE‑2019‑25488 is a disclosed SQL injection flaw in Jettweb Hazir Rent A Car Script v4 that permits unauthenticated attackers to manipulate the database.
CVE Alert: CVE-2019-25488 - Jettweb - Rent A Car Scripti - https://www.redpacketsecurity.com/cve-alert-cve-2019-25488-jettweb-rent-a-car-scripti/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25488 #jettweb #rent-a-car-scripti
Post summary
This short CVE Alert announces CVE‑2019‑25488 affecting Jettweb’s Rent‑A‑Car‑Scripti, providing no further exploit, patch, or technical detail.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jettweb | php_ready_rent_a_car_site_script | 4 | - | - |