PT-2026-25001 · Netart Media · Netartmedia Php Mall+1

Published 2026-03-12 · Updated 2026-03-12 · CVE-2019-25541

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Netartmedia PHP Mall version 4.1

Description The software contains multiple SQL injection flaws that allow unauthenticated attackers to manipulate database queries through unvalidated parameters. Attackers can inject time-based blind SQL payloads via the id parameter in the ''index.php'' endpoint or the Email parameter in the ''loginaction.php'' endpoint to extract sensitive database information.

Recommendations Apply updates to address the issue in Netartmedia PHP Mall version 4.1.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-25541

Affected Products

Netartmedia Php Mall

Php Mall

References · 4

• 🔥 https://exploit-db.com/exploits/46562 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25541 · Security Note
• https://vulncheck.com/advisories/netartmedia-php-mall-multiple-sql-injection-2 · Note
• https://t.me/CVEtracker/47258 · Telegram Post