CVE-2019-25510 - Jettweb PHP Hazir Haber Sitesi Scripti V2 Authentication Bypass

Back Back to CVE browser

HIGH

Jettweb PHP Hazir Haber Sitesi Scripti V2 Authentication Bypass

Published Mar 12, 2026

8.8

HIGH

CVSS 4.0

EPSS 0.54%

Description

Jettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to gain administrative access by exploiting improper SQL query validation. Attackers can submit SQL injection payloads in the username and password fields of the admingiris.php login form to bypass authentication and access the administrative interface.

Affected products

Vendor Jettweb Product Hazir Haber Sitesi Scripti Default
n/a
- Version
  2.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Jettweb

Hazir Haber Sitesi Scripti

n/a

Version	Status	Constraints
2.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19780
Advisory
https://www.exploit-db.com/exploits/46598
exploitVDB Entry
https://www.vulncheck.com/advisories/jettweb-php-hazir-haber-sitesi-scripti-v2-authentication-bypass
third-party-advisoryThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19780		Advisory
https://www.exploit-db.com/exploits/46598		exploitVDB Entry
https://www.vulncheck.com/advisories/jettweb-php-hazir-haber-sitesi-scripti-v2-authentication-bypass		third-party-advisoryThird Party Advisory