📦

news_website_script

Vendor: phpscriptsmall

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 3 Total Indexed
Avg. EPSS 0.40% Exploit Prob.
Latest CVE CVE-2019-25668 Apr 05

Security Vulnerability Index

Page 1 / 1
8.8 CVSS
CVE-2019-25668

News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the news ID parameter. Attackers can send GET requests to index.php/show/news/ with malicious SQL statements to extract sensitive database information.

EPSS: 0.40%