Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauthenticated attackers to manipulate databa…

Published:

11 maart 2026 om 23:00:00

Alert date:

12 maart 2026 om 17:15:30

Source:

nvd.nist.gov

Web Technologies, Database & Storage

CVE-2019-25488 affects Jettweb Hazir Rent A Car Scripti V4, containing multiple SQL injection vulnerabilities in the admin panel. Unauthenticated attackers can manipulate database queries through GET parameters including 'tur', 'id', and 'ozellikdil' in the admin/index.php endpoint. The vulnerabilities allow extraction of sensitive database information and potential denial of service attacks. Multiple security advisories and exploit code are publicly available for this vulnerability.

Technical details

Mitigation steps:

Affected products:

Jettweb Hazir Rent A Car Scripti V4