CVE-2019-25515 - Jettweb PHP Hazir Haber Sitesi Scripti V3 Authentication Bypass

Back Back to CVE browser

HIGH

Jettweb PHP Hazir Haber Sitesi Scripti V3 Authentication Bypass

Published Mar 12, 2026

8.7

HIGH

CVSS 4.0

EPSS 1.09%

Description

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an authentication bypass vulnerability in the login.php administration panel that allows unauthenticated attackers to gain administrative access by submitting crafted SQL syntax. Attackers can bypass authentication by submitting equals signs and 'or' operators as username and password parameters to access the administration panel without valid credentials.

Affected products

Vendor Jettweb Product Hazir Haber Sitesi Scripti Default
n/a
- Version
  3.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Jettweb

Hazir Haber Sitesi Scripti

n/a

Version	Status	Constraints
3.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19790
Advisory
https://www.exploit-db.com/exploits/46599
exploitVDB Entry
https://www.vulncheck.com/advisories/jettweb-php-hazir-haber-sitesi-scripti-v3-authentication-bypass
third-party-advisoryThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19790		Advisory
https://www.exploit-db.com/exploits/46599		exploitVDB Entry
https://www.vulncheck.com/advisories/jettweb-php-hazir-haber-sitesi-scripti-v3-authentication-bypass		third-party-advisoryThird Party Advisory