High severity8.2NVD Advisory· Published Mar 24, 2026· Updated Apr 15, 2026

CVE-2019-25643

Description

eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the bid parameter. Attackers can send GET requests to banners.php with crafted SQL payloads in the bid parameter to extract sensitive database information from the INFORMATION_SCHEMA tables.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Endonesia/eNdonesia Portalllm-fuzzy
Range: =8.7

Patches

Vulnerability mechanics

References

www.endonesia.orgnvd
sourceforge.net/projects/endonesia/nvd
www.exploit-db.com/exploits/46559nvd
www.vulncheck.com/advisories/endonesia-portal-sql-injection-via-banners-phpnvd

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000