Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the videoid parameter. Attackers can send GET requests to fonksiyonlar.php with malicious videoid values using UNION-based injection to extract sensitive database information.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2019-25511 Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQ… https://www.cve.org/CVERecord?id=CVE-2019-25511
Post summary
The text announces that Jettweb PHP Hazir Haber Sitesi Scriptv3 has an unauthenticated SQL injection vulnerability (CVE‑2019‑25511) that allows attackers to manipulate database queries.
CVE Alert: CVE-2019-25511 - Jettweb - Hazir Haber Sitesi Scripti - https://www.redpacketsecurity.com/cve-alert-cve-2019-25511-jettweb-hazir-haber-sitesi-scripti/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25511 #jettweb #hazir-haber-sitesi-scripti
Post summary
The post announces CVE‑2019‑25511 with a link to a security alert, but it does not provide PoC, exploit details, patch info, or in‑depth technical specifics.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jettweb | php_stock_news_site_script | 3 | - | - |