Home / Vulnerability Intelligence / CVE-2019-25508

CVE-2019-25508 - Vulnerability Analysis

HighCVSS: 8.2

Last Updated: March 12, 2026

Jettweb Php Hazir Ilan Sitesi Scripti - SQL Injection

Published: March 12, 2026Updated: March 12, 2026Remote Exploitable

Overview

Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an sql injection caused by unsanitized 'kat' parameter in katgetir.php, letting unauthenticated attackers extract sensitive database information via crafted GET requests.

Severity & Score

Severity: High

CVSS Score: 8.2

Impact

Unauthenticated attackers can extract sensitive database information, potentially compromising the entire database.

Mitigation

Update to the latest version with SQL injection fixes.

References

https://www.exploit-db.com/exploits/46606
https://www.vulncheck.com/advisories/jettweb-php-hazir-ilan-sitesi-scripti-v2-sql-injection-via-katgetir-php

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2019-25508
Severity: High
CVSS Score: 8.2
Type: sql_injection
Status: unconfirmed

CWE

CWE-89

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N