PT-2026-24968 · Jettweb · Hazir Ilan Sitesi Scripti+1

CVE-2019-25508 · Publicado 2026-03-12 · Atualizado 2026-03-12

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Jettweb Php Hazir Ilan Sitesi Scripti V2 (affected versions not specified)

Description The software contains a SQL injection flaw that allows unauthenticated attackers to manipulate database queries. This is achieved by injecting SQL code through the kat parameter. Attackers can send GET requests to the katgetir.php endpoint with malicious kat values to extract sensitive database information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2019-25508

Produtos afetados

Hazir Ilan Sitesi Scripti

Php Ready Advertisement Site Script

Referências · 3

• 🔥 https://exploit-db.com/exploits/46606 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25508 · Nota de Segurança
• https://vulncheck.com/advisories/jettweb-php-hazir-ilan-sitesi-scripti-v2-sql-injection-via-katgetir-php · Nota