Lucene search
+L

134 matches found

CVE
CVE
added 2026/03/12 3:36 p.m.18 views

CVE-2019-25513

The CVE-2019-25513 entry affects Jettweb PHP Hazir Haber Sitesi Scripti V3. An SQL injection flaw exists in the datagetir.php interface via the q parameter, allowing unauthenticated attackers to manipulate database queries using time-based blind techniques to extract data or bypass authentication...

9.8CVSS5.9AI score0.00564EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2026/03/12 3:36 p.m.17 views

CVE-2019-25512

CVE-2019-25512 affects Jettweb PHP Hazir Haber Sitesi Scripti V3. The vulnerability is an SQL injection exploitable through the kelime parameter in POST requests, allowing UNION-based payloads to extract or modify database contents. The reports indicate a NETWORK attack vector with LOW complexity...

8.8CVSS5.9AI score0.00331EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/12 3:36 p.m.0 views

CVE-2019-25512 Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime parameter in POST requests. Attackers can manipulate the kelime parameter with UNION-based SQL injection payloads to extract sensitive databa...

8.8CVSS5.9AI score0.00331EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/03/12 3:36 p.m.1 views

CVE-2019-25511 Jettweb PHP Hazir Haber Sitesi Scripti V3 SQL Injection

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the videoid parameter. Attackers can send GET requests to fonksiyonlar.php with malicious videoid values using...

8.8CVSS5.9AI score0.00369EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/03/12 3:36 p.m.5 views

CVE-2019-25510

Jettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to gain administrative access by exploiting improper SQL query validation. Attackers can submit SQL injection payloads in the username and...

8.8CVSS5.8AI score0.00538EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2026/03/12 3:36 p.m.12 views

CVE-2019-25510

CVE-2019-25510 affects Jettweb PHP Hazir Haber Sitesi Scripti V2. The vulnerability is an authentication bypass in the administration panel caused by improper SQL query validation in the admingiris.php login form, enabling unauthenticated attackers to bypass login and access the administrative in...

9.8CVSS5.8AI score0.00538EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2026/03/12 3:36 p.m.35 views

CVE-2019-25508

CVE-2019-25508 describes an SQL injection in the Jettweb Php Hazir Ilan Sitesi Scripti V2. The vulnerability arises from unsafely handling the GET parameter “kat” in the /katgetir.php endpoint, allowing unauthenticated attackers to manipulate queries and potentially exfiltrate database informatio...

8.8CVSS5.9AI score0.0036EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/12 12:0 a.m.10 views

PT-2026-24973

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' parameter. Attackers can send GET requests to datagetir.php with malicious 'q' values using time-based blind...

8.8CVSS5.9AI score0.00564EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/03/12 12:0 a.m.11 views

PT-2026-24975

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an authentication bypass vulnerability in the login.php administration panel that allows unauthenticated attackers to gain administrative access by submitting crafted SQL syntax. Attackers can bypass authentication by submitting equals signs and...

8.7CVSS5.8AI score0.01089EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/03/12 12:0 a.m.10 views

PT-2026-24977

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter. Attackers can send requests to haberarsiv.php with malicious cid values using UNION-based injecti...

8.8CVSS5.9AI score0.00451EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2007-4059

Malware in sbrugna...

4.3CVSS6.4AI score0.01216EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2007-5162

Malware in sbrugna...

7.5CVSS6.4AI score0.01175EPSS
SaveExploits2References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.12 views

EUVD-2007-0685

Malware in sbrugna...

7.5CVSS6.2AI score0.01257EPSS
SaveExploits1References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2007-5163

Malware in sbrugna...

4.3CVSS6.4AI score0.01224EPSS
SaveExploits0References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2007-6637

Malware in sbrugna...

4.3CVSS6.4AI score0.01489EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2007-4060

Malware in sbrugna...

7.5CVSS6.4AI score0.00928EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2008-4159

Malware in sbrugna...

7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2007-1416

Malware in sbrugna...

7.5CVSS6.4AI score0.00983EPSS
SaveExploits2References4
Packet Storm
Packet Storm
added 2023/08/22 12:0 a.m.388 views

FastMatch Iddaa Tahmin Scripti 2.0 SQL Injection

==================================================================================================================================== | Title : FastMatch İddaa Tahmin Scripti v2.0 auth by pass vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefo...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2019/07/19 12:0 a.m.109 views

Web Ofisi Emlak 2 SQL Injection

Exploit Title: Web Ofisi Emlak 2 - 'ara' SQL Injection Date: 2019-07-19 Exploit Author: Ahmet Ümit BAYRAM Vendor: https://www.web-ofisi.com/detay/emlak-scripti-v2.html Demo Site: http://demobul.net/emlakv2/ Version: v2 Tested on: Kali Linux CVE: N/A ----- PoC: SQLi ----- Request:...

0.1AI score
SaveExploits0
Rows per page
Query Builder