PT-2026-24972 · Jettweb · Hazir Haber Sitesi Scripti+1

Published 2026-03-12 · Updated 2026-03-12 · CVE-2019-25512

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Jettweb PHP Hazir Haber Sitesi Scripti versions 3.0 through 3.0

Description The software contains a SQL injection flaw. Attackers can inject malicious SQL commands through the kelime parameter in POST requests. By manipulating the kelime parameter with UNION-based SQL injection payloads, attackers can extract sensitive database information or modify database contents.

Recommendations Apply input validation and sanitization to the kelime parameter in POST requests.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-25512

Affected Products

Hazir Haber Sitesi Scripti

Php Stock News Site Script

References · 3

• 🔥 https://exploit-db.com/exploits/46599 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25512 · Security Note
• https://vulncheck.com/advisories/jettweb-php-hazir-haber-sitesi-scripti-v3-sql-injection-2 · Note