← Vulnerability feed

Vulnerability record · CVE-2019-25519 · published 12 March 2026

CVE-2019-25519: Jettweb php stock news site script sql injection vulnerability

Jettweb · Php Stock News Site Script

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the option parameter. Attackers can send POST requests to uyelik.php with crafted payloads in the option parameter to execute time-based SQL injection attacks and extract sensitive database information.

8.8 CVSS 4.0 High EPSS 0.27% · top 83.5% CWE-89 · SQL injection
8.8CVSS 4.0 base score
0.27%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 1 tagged exploit
17 Jun 2026Last modified by NVD

Description

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the option parameter. Attackers can send POST requests to uyelik.php with crafted payloads in the option parameter to execute time-based SQL injection attacks and extract sensitive database information.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.exploit-db.com/exploits/46597 ExploitVDB Entry
https://www.vulncheck.com/advisories/jettweb-php-hazir-haber-sitesi-scripti-v1-sql-injection Third Party Advisory

Track CVE-2019-25519 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2019-25516Jettweb php stock news site script sql injection vulnerabilityJettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie…EPSS 0.44%8.8CVE-2019-25517Jettweb php stock news site script sql injection vulnerabilityJettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie…EPSS 0.45%8.8CVE-2019-25518Jettweb php stock news site script sql injection vulnerabilityJettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie…EPSS 0.36%8.8CVE-2019-25520Jettweb php stock news site script sql injection vulnerabilityJettweb PHP Hazir Haber Sitesi Scripti V1 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated att…EPSS 0.43%8.8CVE-2019-25510Jettweb php stock news site script sql injection vulnerabilityJettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated att…EPSS 0.54%8.8CVE-2019-25511Jettweb php stock news site script sql injection vulnerabilityJettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie…EPSS 0.37%8.8CVE-2019-25512Jettweb php stock news site script sql injection vulnerabilityJettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the …EPSS 0.33%8.8CVE-2019-25513Jettweb php stock news site script sql injection vulnerabilityJettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie…EPSS 0.56%

Source: NIST National Vulnerability Database (record CVE-2019-25519), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.