Priority HIGH 77
Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to gain administrative access by exploiting improper SQL query v…
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00492 · Published 2026-03-12 · No fix listed CWE-89
Priority HIGH 77
Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the option parameter.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00308 · Published 2026-03-12 · No fix listed CWE-89
Priority HIGH 77
Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the poll parameter.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00418 · Published 2026-03-12 · No fix listed CWE-89
Priority HIGH 77
Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00524 · Published 2026-03-12 · No fix listed CWE-89
Priority HIGH 77
Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the gallery_id parameter.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.0051 · Published 2026-03-12 · No fix listed CWE-89
Priority HIGH 77
Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an authentication bypass vulnerability in the login.php administration panel that allows unauthenticated attackers to gain administrative access by submitting crafted SQ…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.01264 · Published 2026-03-12 · No fix listed CWE-89
Priority HIGH 77
Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime parameter in POST requests.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00595 · Published 2026-03-12 · No fix listed CWE-89
Priority HIGH 77
Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'q' parameter.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00655 · Published 2026-03-12 · No fix listed CWE-89
Priority HIGH 77
Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime parameter in POST requests.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00385 · Published 2026-03-12 · No fix listed CWE-89
Priority MEDIUM 44
Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the videoid parameter.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00429 · Published 2026-03-12 · No fix listed CWE-89
Priority MEDIUM 45
Jettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to gain administrative access by exploiting improper SQL query v…
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00625 · Published 2026-03-12 · No fix listed CWE-89
Priority HIGH 77
Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'kat' parameter.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00418 · Published 2026-03-12 · No fix listed CWE-89
Priority HIGH 77
Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauthenticated attackers to manipulate database queries through GET parameters.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00478 · Published 2026-03-12 · No fix listed CWE-89
Priority HIGH 77
Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the arac_kategori_id parameter.
CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00418 · Published 2026-03-12 · No fix listed CWE-89