Netartmedia Event Portal 2.0 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by inj…

CVE-2019-25537 affects Netartmedia Event Portal 2.0 with a time-based blind SQL injection vulnerability in the Email parameter of loginaction.php. Unauthenticated attackers can manipulate database queries by sending malicious POST requests with SQL payloads in the Email field. This vulnerability allows extraction of sensitive database information through time-based blind SQL injection techniques. The vulnerability is accessible without authentication, making it particularly dangerous for exposed installations.