Filtered by vendor Netartmedia Subscriptions
Filtered by product Php Real Estate Agency Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-25536 1 Netartmedia 1 Php Real Estate Agency 2026-03-13 8.2 High
Netartmedia PHP Real Estate Agency 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the features[] parameter. Attackers can send POST requests to index.php with crafted SQL payloads in the features[] parameter to extract sensitive database information or manipulate database queries.