CVE-2019-25488 - Vulnerability Analysis

Overview

Jettweb Hazir Rent A Car Scripti V4 contains multiple sql injection vulnerabilities caused by unsanitized GET parameters 'tur', 'id', and 'ozellikdil' in admin/index.php, letting unauthenticated attackers extract sensitive data or cause denial of service.

Severity & Score

Impact

Unauthenticated attackers can extract sensitive database information or cause denial of service, potentially compromising the entire database.

Mitigation

Update to the latest version that patches these SQL injection vulnerabilities.

References

• https://www.exploit-db.com/exploits/46614
• https://www.vulncheck.com/advisories/jettweb-hazir-rent-a-car-scripti-v4-sql-injection-via-admin

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner