Beveiligingsadvies

CVE-2019-25534

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-12 15:37:05
Laatst bijgewerkt 2026-03-12 16:30:38
Toegewezen door VulnCheck
CVSS-score 8.8
Status PUBLISHED

Beschrijving

Netartmedia PHP Car Dealer contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the features[] parameter. Attackers can submit POST requests to index.php with crafted SQL payloads in the features[] parameter to extract sensitive database information or manipulate database queries.