Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL co…

CVE-2019-25540 affects Netartmedia PHP Mall version 4.1, containing multiple SQL injection vulnerabilities. The flaws allow unauthenticated attackers to manipulate database queries by injecting malicious SQL code through various parameters. Successful exploitation enables attackers to extract sensitive information from the database, including user credentials and system data. The vulnerability poses a high risk due to the lack of authentication requirements for exploitation. Multiple proof-of-concept exploits are publicly available, increasing the likelihood of active exploitation.