CVE-2019-25640 - Vulnerability Analysis

Overview

Inout Article Base CMS contains SQL injection vulnerabilities caused by unsanitized 'p' and 'u' parameters in portalLogin.php, letting unauthenticated attackers extract sensitive data or cause denial of service via time-based attacks.

Severity & Score

Impact

Unauthenticated attackers can extract sensitive database information or cause denial of service, impacting data confidentiality and availability.

Mitigation

Update to the latest version of Inout Article Base CMS.

References

• https://www.exploit-db.com/exploits/46593
• https://www.inoutscripts.com/products/inout-article-base/
• https://www.vulncheck.com/advisories/inout-article-base-cms-lastest-sql-injection-via-portallogin-php

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner