PT-2026-27376 · Bootstrap · Bootstrapy Cms

Published 2026-03-24 · Updated 2026-05-01 · CVE-2019-25642

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Bootstrapy CMS (affected versions not specified)

Description Multiple SQL injection flaws allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters. This can lead to the extraction of sensitive database information or a denial of service. The affected endpoints and parameters include:

• 'forum-thread.php' using the thread id parameter
• 'contact-submit.php' using the subject parameter
• 'post-new-submit.php' using the post-id parameter
• The thread-id parameter

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-25642

Affected Products

Bootstrapy Cms

References · 5

• 🔥 https://exploit-db.com/exploits/46590 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25642 · Security Note
• http://bootstrapy.com · Note
• https://t.me/cveNotify/161742 · Telegram Post
• https://vulncheck.com/advisories/bootstrapy-cms-lastest-multiple-sql-injection-via-forum-and-contact-modules · Note