Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'kat' parameter. Attackers can send GET requests to the katgetir.php endpoint with malicious 'kat' values to extract sensitive database information.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2019-25508 Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL… https://www.cve.org/CVERecord?id=CVE-2019-25508
Post summary
The tweet announces CVE-2019-25508 as an SQL injection flaw in Jettweb PHP script permitting unauthenticated database manipulation; no exploit, patch, or mitigation details are provided.
CVE Alert: CVE-2019-25508 - Jettweb - Hazir Ilan Sitesi Scripti - https://www.redpacketsecurity.com/cve-alert-cve-2019-25508-jettweb-hazir-ilan-sitesi-scripti/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25508 #jettweb #hazir-ilan-sitesi-scripti
Post summary
The tweet announces CVE-2019-25508 related to Jettweb on Red Packet Security’s site but does not provide technical details, patches, or exploit information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jettweb | php_ready_advertisement_site_script | 2 | - | - |