PT-2026-24996 · Netart Media · Netartmedia Php Real Estate Agency

Publicado 2026-03-12 · Atualizado 2026-03-12 · CVE-2019-25536

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Netartmedia PHP Real Estate Agency version 4.0

Description The software contains an SQL injection flaw. Unauthenticated attackers can execute arbitrary SQL queries by injecting malicious code through the features[] parameter. Attackers can send POST requests to the ''index.php'' endpoint with crafted SQL payloads in the features[] parameter to extract sensitive database information or manipulate database queries.

Recommendations Apply a fix to sanitize the features[] parameter in POST requests to the ''index.php'' endpoint.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2019-25536

Produtos afetados

Netartmedia Php Real Estate Agency

Referências · 3

• 🔥 https://exploit-db.com/exploits/46574 · Exploit
• https://vulncheck.com/advisories/netartmedia-php-real-estate-agency-sql-injection-via-features-parameter · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25536 · Nota de Segurança