CVE-2019-25699: Gurkanuzunca Newsbull

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Newsbull Haber Script 1.0.0 contains multiple SQL injection vulnerabilities in the search parameter that allow authenticated attackers to extract database information through time-based, blind, and boolean-based injection techniques. Attackers can inject malicious SQL code through the search parameter in endpoints like /admin/comment/records, /admin/category/records, /admin/news/records, and /admin/menu/childs to manipulate database queries and retrieve sensitive data.

Affected products

• Gurkanuzunca Newsbull: version 1.0.0 only

Published 2026-04-12. Last modified 2026-06-17.