Description
Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the arac_kategori_id parameter. Attackers can send POST requests to the endpoint with malicious SQL payloads to extract sensitive database information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Jettweb | Hazir Rent A Car Sitesi Scripti | 2.0 | — |
References
- ExploitDB-46624 exploit
- VulnCheck Advisory: Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 SQL Injection third-party-advisory