CVE-2019-25543 - Vulnerability Analysis

Overview

Netartmedia Real Estate Portal 5.0 contains an sql injection caused by unsanitized input in the page parameter in index.php, letting unauthenticated attackers bypass authentication, extract or modify database contents.

Severity & Score

Impact

Unauthenticated attackers can bypass authentication, extract sensitive data, or modify database contents.

Mitigation

Update to the latest version.

References

• https://www.exploit-db.com/exploits/46563
• https://www.vulncheck.com/advisories/netartmedia-real-estate-portal-sql-injection-via-index-php-2

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner