CVE-2019-25508

Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'kat' parameter. Attackers can send GET requests to the katgetir.php endpoint with malicious 'kat' values to...

CVE-2019-25534

CVE-2019-25534 affects Netartmedia PHP Car Dealer. An SQL injection allows unauthenticated attackers to submit crafted SQL via the features[] parameter in POST requests to index.php, enabling extraction of sensitive database information or manipulation of queries. CVSS scores indicate high severi...

CVE-2019-25533 Netartmedia PHP Business Directory 4.2 SQL Injection via loginaction.php

Netartmedia PHP Business Directory 4.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the Email parameter. Attackers can send POST requests to the loginaction.php endpoint with crafted SQL payloads in the...

CVE-2019-25532

Netartmedia Jobs Portal 6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the Email parameter. Attackers can send POST requests to loginaction.php with crafted SQL payloads in the Email field to extract...

CVE-2019-25531

Netartmedia Deals Portal is affected by an SQL injection in the Email parameter of loginaction.php, allowing unauthenticated attackers to manipulate queries and potentially extract data or bypass authentication. The vulnerability is rated HIGH (CVSS 3.1: 8.2, NETWORK/LOW/PR:N/UI:N, with confident...

CVE-2019-25528 Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search

Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the property1 parameter. Attackers can send POST requests to the search/searchdetailed endpoint with malicious SQL...

CVE-2019-25526 Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search

Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the location parameter. Attackers can send POST requests to the search/searchdetailed endpoint with malicious SQL payloa...

CVE-2019-25524

CVE-2019-25524 affects XooGallery Latest and is caused by an SQL injection in the p parameter to results.php. The vulnerability allows unauthenticated attackers to manipulate database queries, potentially bypassing authentication, extracting sensitive data, or modifying data. Exploitation details...

CVE-2019-25519 Jettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the option parameter. Attackers can send POST requests to uyelik.php with crafted payloads in the option parameter to...

CVE-2019-25518 Jettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection via arama.php

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the poll parameter. Attackers can send POST requests to arama.php with malicious SQL payloads in the poll parameter ...

CVE-2019-25512 Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime parameter in POST requests. Attackers can manipulate the kelime parameter with UNION-based SQL injection payloads to extract sensitive databa...

CVE-2019-25481 iScripts ReserveLogic Lastest SQL Injection via search endpoint

iScripts ReserveLogic contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the jqSearchDestination parameter. Attackers can send POST requests to the search endpoint with crafted SQL payloads to extract sensitiv...

CVE-2019-25515

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:04+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25515 2026-03-18 06:40:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhcuwkfqg22e...

CVE-2019-25516

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:04+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25516 2026-03-17 23:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhc5hkogjv2i...

CVE-2019-25511

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25511 2026-03-19 10:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhfqlaspbi2q...

CVE-2019-25512

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25512 2026-03-18 01:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhcd2etkfu23...

CVE-2019-25514

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25514 2026-03-18 02:00:14+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhcfbzie772u...

CVE-2019-25510

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25510 2026-03-18 01:00:13+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhcbwqjesh2e...

CVE-2019-25513

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:03+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25513 2026-03-18 01:40:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhce65immb2i...

CVE-2019-25488

creationtimestamp| type| source ---|---|--- 2026-03-12 15:16:02+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2019-25488 2026-03-18 02:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mhcgfnrmov2m...