CVE-2019-25542 affects Netartmedia Real Estate Portal 5.0, containing a SQL injection vulnerability in the user_email parameter. Unauthenticated attackers can manipulate database queries by injecting SQL code through POST requests to index.php. The vulnerability allows attackers to bypass authentication, extract sensitive data, or modify database contents. The flaw is exploitable without authentication, making it particularly dangerous. Multiple exploit resources are available including Exploit-DB and VulnCheck advisories.