CVE-2019-25536

HIGH 8.2CVE-2019-25536 · Published 12/03/2026 · updated 17/06/2026

In short

CVE-2019-25536 is a HIGH (CVSS 8.2) vulnerability affecting real estate portal (netartmedia).
Chance of exploitation in the next 30 days (EPSS): 0.33%, higher than 25.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
real estate portal netartmedia	`= 4.0`	No fix yet

Description

Netartmedia PHP Real Estate Agency 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the features[] parameter. Attackers can send POST requests to index.php with crafted SQL payloads in the features[] parameter to extract sensitive database information or manipulate database queries.

References

exploit-db.com/exploits/46574 · Exploit
vulncheck.com/advisories/netartmedia-php-real-estate-agency-sql-injection-via-features-parameter · Third Party Advisory

More vulnerabilities in real estate portal

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

real estate portal

netartmedia

= 4.0

No fix yet

Description

More vulnerabilities in real estate portal

See all →