We’re taking on a small number of new builds and rebuilds this quarter. Book a call to see if your project is a fit.

CVE CVE-2019-25540

CVE-2019-25540

PHP

Severity: HIGH
CVSS: 8.2CVSS
Published: 2026-03-12
Last modified: 2026-03-23
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CWE: CWE-89

Description

Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various parameters. Attackers can craft malicious requests with SQL payloads to extract sensitive database information including user credentials and system data.

References

https://www.exploit-db.com/exploits/46562
https://www.vulncheck.com/advisories/netartmedia-php-mall-multiple-sql-injection

Summary

Description

References