2026-03-12 15:36:46
VulnCheck
PUBLISHED
Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the q parameter. Attackers can send GET requests to datagetir.php with malicious q values using time-based blind SQL injection techniques to extract sensitive database information or bypass authentication.