CVE-2019-25519

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the option parameter. Attackers can send POST requests to uyelik.php with crafted payloads in the option parameter to...

CVE-2019-25519 Jettweb PHP Hazir Haber Sitesi Scripti V1 SQL Injection

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the option parameter. Attackers can send POST requests to uyelik.php with crafted payloads in the option parameter to...

CVE-2019-25519

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability in the option parameter of uyelik.php, enabling time-based injections to extract sensitive data via crafted POST requests. Attacker access is described without authentication; CVSS notes high impact on confidentiali...

PT-2026-24979

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the option parameter. Attackers can send POST requests to uyelik.php with crafted payloads in the option parameter to...

Sql injection

Multiple SQL injection vulnerabilities in unuttum.asp in SuskunDuygular Uyelik Sistemi 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 kadi or 2 email parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-4114

Multiple SQL injection vulnerabilities in unuttum.asp in SuskunDuygular Uyelik Sistemi 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 kadi or 2 email parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-4114

CVE-2007-4114 affects SuskunDuygular Uyelik Sistemi 1.2, where the unuttum.asp page is vulnerable to SQL injection through the kadi and email parameters. The issue allows remote attackers to induce arbitrary SQL commands, as indicated by multiple SQL injection vulnerabilities in the vulnerable pa...

CVE-2007-4114

Multiple SQL injection vulnerabilities in unuttum.asp in SuskunDuygular Uyelik Sistemi 1.2 allow remote attackers to execute arbitrary SQL commands via the 1 kadi or 2 email parameter. NOTE: some of these details are obtained from third party information...

CVE-2006-1021

Cross-site scripting XSS vulnerability in solmenu.php in PeHePe Uyelik Sistemi aka PeHePe MemberShip Management System 3 allows remote attackers to inject arbitrary web script or HTML via the kuladi parameter $kuladi variable...

Remote file inclusion

PHP remote file include vulnerability in solmenu.php in PeHePe Uyelik Sistemi aka PeHePe MemberShip Management System 3 allows remote attackers to include and execute arbitrary PHP code via a URL in the uyeklasor parameter, along with a misafir parameter that is set to UYESEVIYE...

CVE-2006-1022

PHP remote file include vulnerability in solmenu.php in PeHePe Uyelik Sistemi aka PeHePe MemberShip Management System 3 allows remote attackers to include and execute arbitrary PHP code via a URL in the uyeklasor parameter, along with a misafir parameter that is set to UYESEVIYE...

CVE-2006-1021

Cross-site scripting XSS vulnerability in solmenu.php in PeHePe Uyelik Sistemi aka PeHePe MemberShip Management System 3 allows remote attackers to inject arbitrary web script or HTML via the kuladi parameter $kuladi variable...

CVE-2006-1021

CVE-2006-1021 describes a cross-site scripting (XSS) vulnerability in PeHePe Uyelik Sistemi (aka PeHePe MemberShip Management System) version 3. The flaw resides in the sol_menu.php script and allows an attacker to inject arbitrary web script or HTML via the kuladi parameter ($kul_adi variable). ...

CVE-2006-1022

PHP remote file include vulnerability in solmenu.php in PeHePe Uyelik Sistemi aka PeHePe MemberShip Management System 3 allows remote attackers to include and execute arbitrary PHP code via a URL in the uyeklasor parameter, along with a misafir parameter that is set to UYESEVIYE...

CVE-2006-1022

CVE-2006-1022 affects PeHePe Uyelik Sistemi (PeHePe Membership Management System) version 3. The issue is a PHP remote file inclusion in sol_menu.php. An attacker can cause arbitrary PHP code execution by supplying a URL in the uye_klasor parameter, together with misafir[] set to UYE_SEVIYE. This...