14
CVEs
0
Critical
14
High
0
KEV
14
PoC
14
Unpatched C/H
0.0%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
14
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (4)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2019-25513 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' parameter. [CVSS 8.2 HIGH] | HIGH | 8.2 | 0.1% | 61 |
PoC
No patch
|
| CVE-2019-25510 | Jettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to gain administrative access by exploiting improper SQL query validation. [CVSS 8.2 HIGH] | HIGH | 8.2 | 0.1% | 61 |
PoC
No patch
|
| CVE-2019-25520 | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to gain administrative access by exploiting improper SQL query validation. [CVSS 8.2 HIGH] | HIGH | 8.2 | 0.1% | 61 |
PoC
No patch
|
| CVE-2019-25482 | Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the arac_kategori_id parameter. [CVSS 8.2 HIGH] | HIGH | 8.2 | 0.1% | 61 |
PoC
No patch
|
| CVE-2019-25508 | Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'kat' parameter. [CVSS 8.2 HIGH] | HIGH | 8.2 | 0.1% | 61 |
PoC
No patch
|
| CVE-2019-25511 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the videoid parameter. [CVSS 8.2 HIGH] | HIGH | 8.2 | 0.1% | 61 |
PoC
No patch
|
| CVE-2019-25516 | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the gallery_id parameter. [CVSS 8.2 HIGH] | HIGH | 8.2 | 0.1% | 61 |
PoC
No patch
|
| CVE-2019-25517 | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter. [CVSS 8.2 HIGH] | HIGH | 8.2 | 0.1% | 61 |
PoC
No patch
|
| CVE-2019-25518 | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the poll parameter. [CVSS 8.2 HIGH] | HIGH | 8.2 | 0.1% | 61 |
PoC
No patch
|
| CVE-2019-25488 | Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauthenticated attackers to manipulate database queries through GET parameters. [CVSS 8.2 HIGH] | HIGH | 8.2 | 0.1% | 61 |
PoC
No patch
|
| CVE-2019-25514 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime parameter in POST requests. [CVSS 8.2 HIGH] | HIGH | 8.2 | 0.1% | 61 |
PoC
No patch
|
| CVE-2019-25512 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime parameter in POST requests. [CVSS 8.2 HIGH] | HIGH | 8.2 | 0.0% | 61 |
PoC
No patch
|
| CVE-2019-25519 | Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the option parameter. [CVSS 8.2 HIGH] | HIGH | 8.2 | 0.0% | 61 |
PoC
No patch
|
| CVE-2019-25515 | Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an authentication bypass vulnerability in the login.php administration panel that allows unauthenticated attackers to gain administrative access by submitting crafted SQL syntax. [CVSS 7.5 HIGH] | HIGH | 7.5 | 0.2% | 58 |
PoC
No patch
|