Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime parameter in POST requests. Attackers can manipulate the kelime parameter with UNION-based SQL injection payloads to extract sensitive database information or modify database contents.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE Alert: CVE-2019-25512 - Jettweb - Hazir Haber Sitesi Scripti - https://www.redpacketsecurity.com/cve-alert-cve-2019-25512-jettweb-hazir-haber-sitesi-scripti/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25512 #jettweb #hazir-haber-sitesi-scripti
Post summary
The tweet merely announces a CVE alert (CVE‑2019‑25512) and provides an external link, with no further details on exploitation, patches, or technical specifics.
CVE-2019-25512 Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime parameter … https://www.cve.org/CVERecord?id=CVE-2019-25512
Post summary
CVE-2019-25512 identifies an SQL injection flaw in the Jettweb PHP script V3 that targets the "kelime" parameter, yet no PoC, exploit, or patch details are provided in the text.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jettweb | php_stock_news_site_script | 3 | - | - |