CVE-2019-25540 - Vulnerability Analysis

Overview

Netartmedia PHP Mall 4.1 contains multiple sql injection vulnerabilities caused by unsanitized input in various parameters, letting unauthenticated attackers extract sensitive database information, exploit requires crafted malicious requests.

Severity & Score

Impact

Unauthenticated attackers can extract sensitive database information including user credentials and system data.

Mitigation

Update to the latest version of Netartmedia PHP Mall.

References

• https://www.exploit-db.com/exploits/46562
• https://www.vulncheck.com/advisories/netartmedia-php-mall-multiple-sql-injection

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner