Skip to content
COOEY

EXPOSURES › CVE-2019-25674

CVE-2019-25674

HIGH
DETAIL
SourceNVD · cve Published2026-04-05 CVSS8.2 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2019-25674 ↗

▸ RECOMMENDED ACTION  Patch the affected products and confirm your instances are covered.

PLAYERS IMPLICATED
victoralagwu · vendorcmssite · product
DESCRIPTION

CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send GET requests to post.php with malicious 'post' values to extract sensitive database information or perform time-based blind SQL injection attacks.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.