CVE-2019-25518

概要

参考情報

• exploit-db.com/exploits/46597 · Exploit
• vulncheck.com/advisories/jettweb-php-hazir-haber-sitesi-scripti-v1-sql-injection-via-arama-php · Third Party Advisory

php stock news site script のその他の脆弱性

• CVE-2019-25520緊急 9.8Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an authentication bypass vulnerability in the administration panel that allows unauthenti…
• CVE-2019-25519高 8.2Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by in…
• CVE-2019-25517高 8.2Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate databa…
• CVE-2019-25516高 7.5Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate databa…
• CVE-2019-25515緊急 9.8Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an authentication bypass vulnerability in the login.php administration panel that allows …