PT-2026-30477 · Php Scripts Mall · News Website Script

Mr Winst0N · Published 2026-04-05 · Updated 2026-04-05 · CVE-2019-25668

NVD

CVSS v3.1

8.2

High

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the news ID parameter. Attackers can send GET requests to index.php/show/news/ with malicious SQL statements to extract sensitive database information.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-25668

Affected Products

News Website Script

References · 4

• 🔥 https://exploit-db.com/exploits/46456 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25668 · Security Note
• http://phpscriptsmall.com · Note
• https://vulncheck.com/advisories/news-website-script-sql-injection-via-index-php · Note