CVE-2019-25642 in CMS
Сводка (Английский)
Bootstrapy CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters. Attackers can inject SQL payloads into the thread_id parameter of forum-thread.php, the subject parameter of contact-submit.php, the post-id parameter of post-new-submit.php, and the thread-id parameter to extract sensitive database information or cause denial of service.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Ответственный
VulnCheck
Резервировать
24.03.2026
Раскрытие
24.03.2026
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 352710 | Bootstrapy CMS Parameter forum-thread.php SQL-инъекция | 89 | Доказательство концепции | Не определено | CVE-2019-25642 |