Unrated severityNVD Advisory· Published Mar 12, 2026· Updated Mar 12, 2026
Netartmedia PHP Mall 4.1 Multiple SQL Injection
CVE-2019-25541
Description
Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through unvalidated parameters. Attackers can inject time-based blind SQL payloads via the 'id' parameter in index.php or the 'Email' parameter in loginaction.php to extract sensitive database information.
Affected products
2- Range: =4.1
- Netartmedia/Netartmedia PHP Mallv5Range: 4.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.exploit-db.com/exploits/46562mitreexploit
- www.vulncheck.com/advisories/netartmedia-php-mall-multiple-sql-injection-2mitrethird-party-advisory
News mentions
0No linked articles in our index yet.