Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the gallery_id parameter. Attackers can send GET requests to gallery.php with malicious gallery_id values using UNION-based SQL injection to extract sensitive database information.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2019-25516 Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQ… https://www.cve.org/CVERecord?id=CVE-2019-25516
Post summary
The tweet discloses that CVE‑2019‑25516 is an SQL injection flaw in Jettweb PHP Hazir Haber Sitesi Scripti V1, permitting unauthenticated database manipulation.
CVE Alert: CVE-2019-25516 - Jettweb - Hazir Haber Sitesi Scripti - https://www.redpacketsecurity.com/cve-alert-cve-2019-25516-jettweb-hazir-haber-sitesi-scripti/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25516 #jettweb #hazir-haber-sitesi-scripti
Post summary
The tweet simply advertises that CVE-2019-25516 affects the Jettweb Hazir Haber Sitesi script and links to an external alert, but provides no deeper technical or remediation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jettweb | php_stock_news_site_script | 1 | - | - |