CVE-2019-25439Disclosure

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

NoviSmart CMS contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the Referer HTTP header field. Attackers can craft requests with time-based SQL injection payloads in the Referer header to extract sensitive database information or cause denial of service.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-02-22); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CRAC Learning - Tech@cracbot223d
Disclosure
CVE-2019-25439 (CVSS:8.8, HIGH) is Awaiting Analysis. NoviSmart CMS contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by i..https://nvd.nist.gov/vuln/detail/CVE-2019-25439 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE-2019-25439 is a high‑severity SQL injection flaw in NoviSmart CMS, currently under analysis with no known exploit or patch disclosed.
0000012
173 followersView on X
CVETodo@CveTodo228d
Disclosure
**CVE-2019-25439** pertains to an SQL injection vulnerability within NoviSmart CMS. This flaw allows remote attackers to execute arbitrary SQL queries by injecting malicious code into the Referer HTTP header field of HTTP requests. Since the Referer header is often included in HTTP requests, an attacker can craft a malicious request that the server processes without proper sanitization, leading to SQL injection. #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution #SQLInjection #PrivilegeEscalation https://cvetodo.com/cve/CVE-2019-25439
Post summary
The post details an SQL injection flaw in NoviSmart CMS that allows attackers to inject malicious code via the Referer header to execute arbitrary SQL queries, but it does not mention PoC, exploitation, patches, or false positives.
0000033
20 followersView on X

Explore more

Back to dashboard