PT-2026-32161 · Resourcespace · Resourcespace

Published 2026-04-12 · Updated 2026-04-12 · CVE-2019-25693

Mitre

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

ResourceSpace 8.6 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the keywords parameter in collection edit.php. Attackers can submit POST requests with crafted SQL payloads in the keywords field to extract sensitive database information including schema names, user credentials, and other confidential data.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2019-25693

Affected Products

Resourcespace

References · 5

• 🔥 https://exploit-db.com/exploits/46274 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25693 · Security Note
• https://vulncheck.com/advisories/resourcespace-sql-injection-via-collection-edit-php · Note
• https://resourcespace.com · Note
• https://resourcespace.com/get · Note