Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parameter. Attackers can supply malicious SQL syntax in the page parameter to extract sensitive database information or modify database contents.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2019-25444 Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through t… https://www.cve.org/CVERecord?id=CVE-2019-25444
Post summary
The post discloses that Fiverr Clone Script 1.2.2 has an unauthenticated SQL injection flaw allowing manipulation of database queries.
**CVE-2019-25444** pertains to an **SQL Injection vulnerability** present in **Fiverr Clone Script version 1.2.2**. SQL Injection occurs when user-supplied data is improperly sanitized and directly incorporated into SQL queries, allowing attackers to execute arbitrary SQL code on the database. #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution #SQLInjection #PrivilegeEscalation https://cvetodo.com/cve/CVE-2019-25444
Post summary
The text announces CVE-2019-25444 as an SQL injection vulnerability in Fiverr Clone Script v1.2.2, detailing how unsanitized user input allows arbitrary SQL execution.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | phpscriptsmall | fiverr_clone_script | 1.2.2 | - | - |