CVE Watch24 jul 2026

CVE-2019-25674

CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL co

CVSS

8.2

Alto

EPSS

0.4%

p35

KEV

—

Exploit Today

0-100

Publicado: 5 abr 2026 · Última mod.: 24 jul 2026 · CWE-89

EPSS · 30d

0.4%EPSS · 30 días0.4%

2026-08-252026-09-23

Descripción técnica

CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter. Attackers can send GET requests to post.php with malicious 'post' values to extract sensitive database information or perform time-based blind SQL injection attacks.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-956019.3 CRÍ

—

——0Unauthenticated SQL Injection in Product Filter by WBW <= 3.1.7 versions.3h CVE-2026-955937.6 ALT

—

——0Editor SQL Injection in Ultimeter <= 3.0.8 versions.3h CVE-2026-955907.1 ALT

—

——0Subscriber SQL Injection in Tainacan <= 1.2.0 versions.3h CVE-2026-955227.6 ALT

—

——0Shop manager SQL Injection in Easy Digital Downloads <= 3.7.0 versions.3h CVE-2026-941747.6 ALT

—

——0Administrator SQL Injection in Email Log <= 2.63 versions.3h CVE-2026-941248.5 ALT

—

——0Contributor SQL Injection in WP EasyCart <= 5.9.4 versions.3h