Approved changes feed: RSS · Atom

cpe:2.3:a:newsbull:newsbull_haber_script:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNewsbull (083cb2c8-24ac-5094-94a7-6eca3e80fab6)
ProductNewsbull Haber Script (fccf4e95-7758-5051-b234-1fbc6127123b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25699 vulnerable 2026-06-08 05:13:42.790645 Newsbull Haber Script 1.0.0 Authenticated SQL Injection via search parameter
HIGH (7.1)
Newsbull Haber Script 1.0.0 contains multiple SQL injection vulnerabilities in the search parameter that allow authenticated attackers to extract database information through time-based, blind, and boolean-based injection techniques. Attackers can inject malicious SQL code through the search parameter in endpoints like /admin/comment/records, /admin/category/records, /admin/news/records, and /admin/menu/childs to manipulate database queries and retrieve sensitive data.
Published: 2026-04-12T12:28:49.056Z
Updated: 2026-04-13T18:06:18.270Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.