High severity8.2NVD Advisory· Published Mar 12, 2026· Updated Jun 17, 2026
CVE-2019-25541
CVE-2019-25541
Description
Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through unvalidated parameters. Attackers can inject time-based blind SQL payloads via the 'id' parameter in index.php or the 'Email' parameter in loginaction.php to extract sensitive database information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:netartmedia:php_mall:4.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:netartmedia:php_mall:4.1:*:*:*:*:*:*:*
- (no CPE)range: <=4.1
- Netartmedia/Netartmedia PHP Mallv5Range: 4.1
Patches
Vulnerability mechanics
References
2- www.exploit-db.com/exploits/46562nvdExploitThird Party AdvisoryVDB Entry
- www.vulncheck.com/advisories/netartmedia-php-mall-multiple-sql-injection-2nvdThird Party Advisory
News mentions
0No linked articles in our index yet.