High severity8.2NVD Advisory· Published Feb 22, 2026· Updated Apr 15, 2026

CVE-2019-25439

Description

NoviSmart CMS contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the Referer HTTP header field. Attackers can craft requests with time-based SQL injection payloads in the Referer header to extract sensitive database information or cause denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Statamic/CMSllm-fuzzy

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/47152nvd
www.vulncheck.com/advisories/novismart-cms-sql-injection-via-referer-http-headernvd

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000