Vulnerability Details CVE-2019-25540
Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various parameters. Attackers can craft malicious requests with SQL payloads to extract sensitive database information including user credentials and system data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 28.0%
CVSS Severity
CVSS v3 Score 8.2
References
Products affected by CVE-2019-25540
-
cpe:2.3:a:netartmedia:php_mall:4.1