VYPR
High severity8.2NVD Advisory· Published Mar 12, 2026· Updated Jun 17, 2026

CVE-2019-25540

CVE-2019-25540

Description

Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various parameters. Attackers can craft malicious requests with SQL payloads to extract sensitive database information including user credentials and system data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Netartmedia/Netartmedia PHP Mallv5
    Range: 4.1
  • Netartmedia/PHP Mallllm-fuzzy2 versions
    = 4.1+ 1 more
    • (no CPE)range: = 4.1
    • cpe:2.3:a:netartmedia:php_mall:4.1:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.