CVE Intelligence

Gurkanuzunca Newsbull vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Gurkanuzunca Newsbull: 1 record(s), with affected versions and fixes.
cpe:2.3:a:gurkanuzunca:newsbull

CVE-2019-25699 High · 7.1 CWE-89 Apr 12, 2026
Newsbull Haber Script 1.0.0 Authenticated SQL Injection via search parameter
Newsbull Haber Script 1.0.0 contains multiple SQL injection vulnerabilities in the search parameter that allow authenticated attackers to extract database information through time-based, blind, and boolean-based injection techniques. Attackers can inject malicious SQL code through the search parameter in endpoints like /admin/comment/records, /admin/category/records, /admin/news/records, and /admin/menu/childs to manipulate database queries and retrieve sensitive data.