PT-2026-24997 · Netart Media · Netartmedia Event Portal
CVE-2019-25537
·
Publicado
2026-03-12
·
Atualizado
2026-03-12
CVSS v3.1
8.2
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Netartmedia Event Portal version 2.0
Description
The software contains a time-based blind SQL injection issue that allows unauthenticated attackers to manipulate database queries. Attackers can inject SQL code through the
Email parameter. By sending POST requests to the ''loginaction.php'' endpoint with malicious SQL payloads in the Email field, attackers can extract sensitive database information.Recommendations
Apply updates to address the SQL injection issue in the
Email parameter of the ''loginaction.php'' endpoint.Exploit
Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Netartmedia Event Portal