CVE-2019-25520 - Vulnerability Analysis

Overview

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an authentication bypass caused by SQL injection in the admingiris.php login form, letting unauthenticated attackers gain administrative access, exploit requires crafted SQL injection payloads.

Severity & Score

Impact

Unauthenticated attackers can bypass authentication and gain full administrative access to the system.

Mitigation

Update to the latest version with proper SQL query validation or apply patches to fix SQL injection.

References

• https://www.exploit-db.com/exploits/46597
• https://www.vulncheck.com/advisories/jettweb-php-hazir-haber-sitesi-scripti-v1-authentication-bypass

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner