Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime para…

Published:

11 maart 2026 om 23:00:00

Alert date:

12 maart 2026 om 22:25:09

Source:

nvd.nist.gov

Web Technologies, Database & Storage

CVE-2019-25514 is a SQL injection vulnerability in Jettweb PHP Hazir Haber Sitesi Scripti V3. The vulnerability allows attackers to inject malicious SQL commands through the kelime parameter in POST requests. Attackers can exploit this using UNION-based SQL injection payloads to extract sensitive database information or bypass authentication controls. This is a high-severity vulnerability that affects the web application's database security.

Technical details

Mitigation steps:

Affected products:

Jettweb PHP Hazir Haber Sitesi Scripti V3