PT-2026-25003 · Netart Media · Netart Media Real Estate Portal+1

Published 2026-03-12 · Updated 2026-03-12 · CVE-2019-25543

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Netartmedia Real Estate Portal version 5.0

Description The software contains an SQL injection issue that allows unauthenticated attackers to manipulate database queries. Attackers can inject SQL code through the page parameter. By submitting POST requests to the ''index.php'' endpoint with malicious SQL payloads in the page field, attackers can bypass authentication, extract sensitive data, or modify database contents. The page parameter is the entry point for this manipulation.

Recommendations Apply a fix to sanitize the page parameter in POST requests to the ''index.php'' endpoint.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-25543

Affected Products

Netart Media Real Estate Portal

Sg Real Estate Portal

References · 4

• 🔥 https://exploit-db.com/exploits/46563 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25543 · Security Note
• https://vulncheck.com/advisories/netartmedia-real-estate-portal-sql-injection-via-index-php-2 · Note
• https://t.me/CVEtracker/47260 · Telegram Post