PT-2026-24968 · Jettweb · Hazir Ilan Sitesi Scripti+1

Published 2026-03-12 · Updated 2026-03-12 · CVE-2019-25508

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Jettweb Php Hazir Ilan Sitesi Scripti V2 (affected versions not specified)

Description The software contains a SQL injection flaw that allows unauthenticated attackers to manipulate database queries. This is achieved by injecting SQL code through the kat parameter. Attackers can send GET requests to the katgetir.php endpoint with malicious kat values to extract sensitive database information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-25508

Affected Products

Hazir Ilan Sitesi Scripti

Php Ready Advertisement Site Script

References · 3

• 🔥 https://exploit-db.com/exploits/46606 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25508 · Security Note
• https://vulncheck.com/advisories/jettweb-php-hazir-ilan-sitesi-scripti-v2-sql-injection-via-katgetir-php · Note