Netartmedia PHP Dating Site contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code th…

Published:

11 maart 2026 om 23:00:00

Alert date:

12 maart 2026 om 22:25:09

Source:

nvd.nist.gov

Web Technologies, Database & Storage

CVE-2019-25535 affects Netartmedia PHP Dating Site with a SQL injection vulnerability in the loginaction.php file. Unauthenticated attackers can exploit the Email parameter to manipulate database queries. The vulnerability allows time-based SQL injection attacks through POST requests. Attackers can extract sensitive database information without authentication. This represents a high-severity web application security flaw.

Technical details

Mitigation steps:

Affected products:

Netartmedia PHP Dating Site