LIVE · cybersecurity feed
Live wire
cve recordhigh

CVE-2019-25543

netartmedia · real estate portal

Published
CVSS8.2
Severityhigh
WeaknessCWE-89
ExploitedNot in CISA KEV

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Description

Netartmedia Real Estate Portal 5.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parameter. Attackers can submit POST requests to index.php with malicious SQL payloads in the page field to bypass authentication, extract sensitive data, or modify database contents.

References

← Back to the CVE Tracker

Our coverage of CVE-2019-25543

No stories yet. This page updates automatically when we publish reporting that references CVE-2019-25543.