CVE-2019-25542 - Vulnerability Analysis

Overview

Netartmedia Real Estate Portal 5.0 contains a sql injection caused by unsanitized user_email parameter in index.php, letting unauthenticated attackers bypass authentication and manipulate database queries.

Severity & Score

Impact

Unauthenticated attackers can bypass authentication, extract sensitive data, or modify database contents.

Mitigation

Update to the latest version.

References

• https://www.exploit-db.com/exploits/46563
• https://www.vulncheck.com/advisories/netartmedia-real-estate-portal-sql-injection-via-index-php

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner