CVE-2019-25510 in Hazir Haber Sitesi Scriptiinformation

Résumé

par MITRE • 12/03/2026

Jettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to gain administrative access by exploiting improper SQL query validation. Attackers can submit SQL injection payloads in the username and password fields of the admingiris.php login form to bypass authentication and access the administrative interface.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsable

VulnCheck

Réserver

12/03/2026

Divulgation

12/03/2026

Modérer

accepté

Entrée

VDB-350674

CPE

prêt

EPSS

0.00538

KEV

non

Activités

très faible

Sources

Do you want to use VulDB in your project?

Use the official API to access entries easily!