Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime para…

Published:

11 maart 2026 om 23:00:00

Alert date:

12 maart 2026 om 22:25:09

Source:

nvd.nist.gov

Web Technologies, Database & Storage

CVE-2019-25512 is an SQL injection vulnerability in Jettweb PHP Hazir Haber Sitesi Scripti V3. The vulnerability exists in the kelime parameter of POST requests, allowing attackers to inject malicious SQL commands. Attackers can exploit this using UNION-based SQL injection techniques to extract sensitive database information or modify database contents. The vulnerability has a high criticality rating and affects web applications using this PHP news script.

Technical details

Mitigation steps:

Affected products:

Jettweb PHP Hazir Haber Sitesi Scripti