Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' parameter. Attackers can send GET requests to datagetir.php with malicious 'q' values using time-based blind SQL injection techniques to extract sensitive database information or bypass authentication.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2019-25513 Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQ… https://www.cve.org/CVERecord?id=CVE-2019-25513
Post summary
The post announces CVE‑2019‑25513, identifies it as an SQL injection flaw in Jettweb PHP script, and provides a link to the CVE record, but does not present a PoC, exploit, or patch details.
CVE Alert: CVE-2019-25513 - Jettweb - Hazir Haber Sitesi Scripti - https://www.redpacketsecurity.com/cve-alert-cve-2019-25513-jettweb-hazir-haber-sitesi-scripti/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25513 #jettweb #hazir-haber-sitesi-scripti
Post summary
A tweet announcing CVE‑2019‑25513 with a link to a CVE alert page; it contains no PoC, exploit, patch, or technical details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jettweb | php_stock_news_site_script | 3 | - | - |