CVE-2019-25537 - Vulnerability Analysis

Overview

Netartmedia Event Portal 2.0 contains a time-based blind SQL injection caused by unsanitized input in the Email parameter in loginaction.php, letting unauthenticated attackers extract sensitive database information remotely.

Severity & Score

Impact

Unauthenticated attackers can extract sensitive database information, leading to data disclosure and potential further compromise.

Mitigation

Update to the latest version or apply patches that sanitize SQL inputs in the Email parameter.

References

• https://www.vulncheck.com/advisories/netartmedia-event-portal-sql-injection-via-loginaction-php
• https://www.exploit-db.com/exploits/46560

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner