Read the docs

Jettweb

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high14CVSS 7.0–8.9

Exploited now

Jettweb records in CISA KEV

No Jettweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

14 records

Priority HIGH 77

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to gain administrative access by exploiting improper SQL query v…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00492 Published 2026-03-12 No fix listed CWE-89
Priority HIGH 77

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the option parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00308 Published 2026-03-12 No fix listed CWE-89
Priority HIGH 77

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the poll parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00418 Published 2026-03-12 No fix listed CWE-89
Priority HIGH 77

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00524 Published 2026-03-12 No fix listed CWE-89
Priority HIGH 77

Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the gallery_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.0051 Published 2026-03-12 No fix listed CWE-89
Priority HIGH 77

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an authentication bypass vulnerability in the login.php administration panel that allows unauthenticated attackers to gain administrative access by submitting crafted SQ…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01264 Published 2026-03-12 No fix listed CWE-89
Priority HIGH 77

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime parameter in POST requests.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00595 Published 2026-03-12 No fix listed CWE-89
Priority HIGH 77

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00655 Published 2026-03-12 No fix listed CWE-89
Priority HIGH 77

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime parameter in POST requests.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00385 Published 2026-03-12 No fix listed CWE-89
Priority HIGH 77

Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'kat' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00418 Published 2026-03-12 No fix listed CWE-89
Priority HIGH 77

Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauthenticated attackers to manipulate database queries through GET parameters.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00478 Published 2026-03-12 No fix listed CWE-89
Priority HIGH 77

Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the arac_kategori_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00418 Published 2026-03-12 No fix listed CWE-89
Priority MEDIUM 45

Jettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to gain administrative access by exploiting improper SQL query v…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00625 Published 2026-03-12 No fix listed CWE-89
Priority MEDIUM 44

Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the videoid parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00429 Published 2026-03-12 No fix listed CWE-89
Open these records in search →