Vulnerability Details CVE-2019-25482
Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the arac_kategori_id parameter. Attackers can send POST requests to the endpoint with malicious SQL payloads to extract sensitive database information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 28.3%
CVSS Severity
CVSS v3 Score 8.2
References
Products affected by CVE-2019-25482
-
cpe:2.3:a:jettweb:php_ready_rent_a_car_site_script:2