CVE-2019-25510

CVE-2019-25510 is an authentication bypass vulnerability affecting Jettweb PHP Hazir Haber Sitesi Scripti V2 (jettweb php_stock_news_site_script). This flaw allows unauthenticated attackers to gain administrative access by injecting SQL payloads into the username and password fields of the admingiris.php login form. Rated as critical with a CVSS score of 9.8, it presents a low-complexity network attack vector that can lead to full compromise of confidentiality, integrity, and availability without requiring user interaction or privileges. Despite its high severity, there is currently no evidence of active exploitation, public exploit code (e.g., Metasploit, ExploitDB), or significant community discussion or media coverage.