Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters. Attackers can supply malicious SQL payloads in the name, description, quantity, or cat_id parameters to add-item.php to execute arbitrary database commands.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-22 | 1 | Exploit1 |
| 2026-02-27 | 1 | General1 |
| 2026-03-23 | 1 | General1 |
📌 Top CVEs recientes (CVSS>=7.0): 1. 💉 CVE-2019-25455 (CVSS: 7.5) 2. 💉 CVE-2019-25452 (CVSS: 7.5) 3. 💉 CVE-2019-25450 (CVSS: 7.5) 4. 💉 CVE-2019-25446 (CVSS: 8.2) 5. 💉 CVE-2019-25443 (CVSS: 8.2) #CyberSecurity #CVE #Infosec
Post summary
The post simply enumerates recent high‑CVSS CVEs without providing additional context such as PoC, exploitation details, or mitigation information.
CVE-2019-25443 (CVSS:8.8, HIGH) is Awaiting Analysis. Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database qu..https://nvd.nist.gov/vuln/detail/CVE-2019-25443 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet reports a high‑severity SQL injection vulnerability (CVE‑2019‑25443) with basic technical details, but no PoC, exploit, patch, or evidence of active exploitation.
**References:** - Exploit-DB: [https://www.exploit-db.com/exploits/47356](https://www.exploit-db.com/exploits/47356) - Vulnerability Advisory: [https://www.vulncheck.com/advisories/inventory-webapp-sql-injection-via-add-itemphp](https://www.vulncheck.com/advisories/inventory-webapp-sql-injection-via-add-itemphp) #Cybersecurity #CVE #HighSeverity #SecurityAlert #SQLInjection https://cvetodo.com/cve/CVE-2019-25443
Post summary
The post highlights CVE‑2019‑25443, linking to an Exploit‑DB entry with functional exploit code and a vulnerability advisory, but does not mention active exploitation or patches.