CVE-2019-25541

HIGH 8.2CVE-2019-25541 · Published 12/03/2026 · updated 17/06/2026

In short

CVE-2019-25541 is a HIGH (CVSS 8.2) vulnerability affecting php mall (netartmedia).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 32.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
php mall netartmedia	`= 4.1`	No fix yet

Description

Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through unvalidated parameters. Attackers can inject time-based blind SQL payloads via the 'id' parameter in index.php or the 'Email' parameter in loginaction.php to extract sensitive database information.

References

exploit-db.com/exploits/46562 · Exploit
vulncheck.com/advisories/netartmedia-php-mall-multiple-sql-injection-2 · Third Party Advisory

More vulnerabilities in php mall

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free