Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQ…

CVE-2019-25519 is a SQL injection vulnerability in Jettweb PHP Hazir Haber Sitesi Scripti V1. The vulnerability exists in the option parameter of uyelik.php file. Attackers can exploit this by sending POST requests with crafted payloads to the vulnerable parameter. The vulnerability allows for time-based SQL injection attacks. Successful exploitation enables attackers to manipulate database queries and extract sensitive information. This affects the entire database security of applications using this script.