CVE-2019-25517 - Vulnerability Analysis
HighCVSS: 8.2Last Updated: March 12, 2026
Jettweb PHP Hazir Haber Sitesi Scripti - SQL Injection
Published: March 12, 2026Updated: March 12, 2026Remote Exploitable
Overview
Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an sql injection caused by unsanitized 'cid' parameter in haberarsiv.php, letting unauthenticated attackers extract or modify database contents.
Severity & Score
Severity: High
CVSS Score: 8.2
Impact
Unauthenticated attackers can extract or modify sensitive database information, potentially compromising the entire database.
Mitigation
Update to the latest version with SQL injection fixes or apply appropriate input sanitization.
References
Related Resources
Details
- CVE ID
- CVE-2019-25517
- Severity
- High
- CVSS Score
- 8.2
- Type
- sql_injection
- Status
- unconfirmed
CWE
- CWE-89
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N