CVE-2019-25514

概要

参考情報

• exploit-db.com/exploits/46599 · Exploit
• vulncheck.com/advisories/jettweb-php-hazir-haber-sitesi-scripti-v3-sql-injection-3 · Third Party Advisory

php stock news site script のその他の脆弱性

• CVE-2019-25520緊急 9.8Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an authentication bypass vulnerability in the administration panel that allows unauthenti…
• CVE-2019-25519高 8.2Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by in…
• CVE-2019-25518高 8.2Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate databa…
• CVE-2019-25517高 8.2Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate databa…
• CVE-2019-25516高 7.5Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate databa…