PT-2026-25003 · Netart Media · Netart Media Real Estate Portal+1

Publicado 2026-03-12 · Atualizado 2026-03-12 · CVE-2019-25543

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Netartmedia Real Estate Portal version 5.0

Description The software contains an SQL injection issue that allows unauthenticated attackers to manipulate database queries. Attackers can inject SQL code through the page parameter. By submitting POST requests to the ''index.php'' endpoint with malicious SQL payloads in the page field, attackers can bypass authentication, extract sensitive data, or modify database contents. The page parameter is the entry point for this manipulation.

Recommendations Apply a fix to sanitize the page parameter in POST requests to the ''index.php'' endpoint.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2019-25543

Produtos afetados

Netart Media Real Estate Portal

Sg Real Estate Portal

Referências · 4

• 🔥 https://exploit-db.com/exploits/46563 · Exploit
• https://vulncheck.com/advisories/netartmedia-real-estate-portal-sql-injection-via-index-php-2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25543 · Nota de Segurança
• https://t.me/CVEtracker/47260 · Publicação no Telegram