Approved changes feed: RSS · Atom

cpe:2.3:a:phpscriptsmall:news_website_script:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPhpscriptsmall (d16cfdc3-4d56-503f-befd-ea7360c176f4)
ProductNews Website Script (b1df1e93-1a73-588a-9c61-bd73ee2bc501)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25668 vulnerable 2026-06-08 05:13:42.743816 News Website Script 2.0.5 SQL Injection via index.php
HIGH (8.2)
News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the news ID parameter. Attackers can send GET requests to index.php/show/news/ with malicious SQL statements to extract sensitive database information.
Published: 2026-04-05T20:45:22.070Z
Updated: 2026-04-06T18:36:39.417Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.