CVE-2019-25532 - Vulnerability Analysis

Overview

Netartmedia Jobs Portal 6.1 contains an sql injection caused by unsanitized Email parameter in loginaction.php, letting unauthenticated attackers extract sensitive data or bypass authentication via crafted POST requests.

Severity & Score

Impact

Unauthenticated attackers can extract sensitive database information or bypass authentication, compromising data confidentiality and access control.

Mitigation

Update to the latest version of Netartmedia Jobs Portal.

References

• https://www.vulncheck.com/advisories/netartmedia-jobs-portal-sql-injection-via-loginaction-php
• https://www.exploit-db.com/exploits/46575

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner