CVE-2019-25540 - Netartmedia PHP Mall 4.1 Multiple SQL Injection

Back Back to CVE browser

HIGH

Netartmedia PHP Mall 4.1 Multiple SQL Injection

Published Mar 12, 2026

8.8

HIGH

CVSS 4.0

EPSS 0.36%

Description

Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various parameters. Attackers can craft malicious requests with SQL payloads to extract sensitive database information including user credentials and system data.

Affected products

Vendor Netartmedia Product Netartmedia PHP Mall Default
n/a
- Version
  4.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Netartmedia

Netartmedia PHP Mall

n/a

Version	Status	Constraints
4.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://www.exploit-db.com/exploits/46562
exploitVDB Entry
https://www.vulncheck.com/advisories/netartmedia-php-mall-multiple-sql-injection
third-party-advisoryThird Party Advisory

Link	Providers	Tags
https://www.exploit-db.com/exploits/46562		exploitVDB Entry
https://www.vulncheck.com/advisories/netartmedia-php-mall-multiple-sql-injection		third-party-advisoryThird Party Advisory