PT-2026-30477 · Php Scripts Mall · News Website Script

Mr Winst0N · Publicado 2026-04-05 · Atualizado 2026-04-05 · CVE-2019-25668

NVD

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the news ID parameter. Attackers can send GET requests to index.php/show/news/ with malicious SQL statements to extract sensitive database information.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2019-25668

Produtos afetados

News Website Script

Referências · 4

• 🔥 https://exploit-db.com/exploits/46456 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25668 · Nota de Segurança
• http://phpscriptsmall.com · Nota
• https://vulncheck.com/advisories/news-website-script-sql-injection-via-index-php · Nota