CVE-2019-25533 - Vulnerability Analysis

Overview

Netartmedia PHP Business Directory 4.2 contains an sql injection caused by unsanitized Email parameter in loginaction.php, letting unauthenticated attackers extract sensitive data or bypass authentication via crafted POST requests.

Severity & Score

Impact

Unauthenticated attackers can extract sensitive database information or bypass authentication, compromising data confidentiality and system access.

Mitigation

Update to the latest version of Netartmedia PHP Business Directory.

References

• https://www.exploit-db.com/exploits/46577
• https://www.vulncheck.com/advisories/netartmedia-php-business-directory-sql-injection-via-loginaction-php

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner