Jettweb Php Hazir Ilan Sitesi SQL Injection Vulnerability

A SQL injection vulnerability has been identified in Jettweb Php Hazir Ilan Sitesi Scripti V2. This vulnerability allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'kat' parameter. Exploitation involves sending GET requests to the 'katgetir.php' endpoint with malicious 'kat' values, which can be used to extract sensitive information from the database.

Impact

Exploitation of this vulnerability allows for unauthorized manipulation of database queries, potentially leading to unauthorized access to sensitive database information.

Reproduction

To reproduce this vulnerability, send a GET request to the 'katgetir.php' endpoint with a crafted 'kat' parameter that includes SQL injection payloads. The injection can be verified by observing the response, which may reveal sensitive database information.