Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an authentication bypass vulnerability in the login.php administration panel that allows unauthenticated attackers to gain administrative access by submitting crafted SQL syntax. Attackers can bypass authentication by submitting equals signs and 'or' operators as username and password parameters to access the administration panel without valid credentials.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE Alert: CVE-2019-25515 - Jettweb - Hazir Haber Sitesi Scripti - https://www.redpacketsecurity.com/cve-alert-cve-2019-25515-jettweb-hazir-haber-sitesi-scripti/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25515 #jettweb #hazir-haber-sitesi-scripti
Post summary
The tweet announces CVE-2019-25515 with a link to a security alert, but it does not provide PoC, exploit details, patches, or technical specifics.
CVE-2019-25515 Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an authentication bypass vulnerability in the login.php administration panel that allows unauthenticated attackers … https://www.cve.org/CVERecord?id=CVE-2019-25515
Post summary
The post discloses that CVE-2019-25515 is an authentication bypass in Jettweb PHP's login.php, but it provides no PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jettweb | php_stock_news_site_script | 3 | - | - |