PT-2026-24992 · Netart Media · Netartmedia Jobs Portal

Published 2026-03-12 · Updated 2026-03-12 · CVE-2019-25532

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Netartmedia Jobs Portal version 6.1

Description An SQL injection flaw exists in Netartmedia Jobs Portal version 6.1 that allows unauthenticated attackers to manipulate database queries. The issue is triggered by injecting SQL code through the Email parameter. Attackers can send POST requests to the ''loginaction.php'' endpoint with crafted SQL payloads in the Email field. This can lead to the extraction of sensitive database information or authentication bypass.

Recommendations Apply updates to address the SQL injection flaw in the Email parameter of the ''loginaction.php'' endpoint.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-25532

Affected Products

Netartmedia Jobs Portal

References · 3

• 🔥 https://exploit-db.com/exploits/46575 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25532 · Security Note
• https://vulncheck.com/advisories/netartmedia-jobs-portal-sql-injection-via-loginaction-php · Note