VulnSocial

CVE-2019-25462General

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Web Ofisi Rent a Car v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'klima' parameter. Attackers can send GET requests to with malicious 'klima' values to extract sensitive database information or cause denial of service.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-02-22); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-02-22: 1Mentions · 2026-02-27: 1Technical Details · 2026-02-22: 1Technical Details · 2026-02-27: 102-2202-27
Signal classification2 categories
General
150.0%
Disclosure
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-02-221
General1
2026-02-271
Disclosure1
Full discourse2 posts
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2019-25462 (CVSS:8.8, HIGH) is Awaiting Analysis. Web Ofisi Rent a Car v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate data..https://nvd.nist.gov/vuln/detail/CVE-2019-25462 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post announces CVE-2019-25462, a high‑severity SQL injection in Web Ofisi Rent a Car v3 that can be exploited unauthenticated; it provides basic technical details but no PoC, exploit code, patch, or evidence of active exploitation.

    0000014
    173 followersView on X
  • CVETodo@CveTodo
    General

    **Severity:** Rated **8.2 (High)** on the CVSS v3 scale, indicating a significant security concern that warrants prompt remediation. #Cybersecurity #CVE #HighSeverity #SecurityAlert #SQLInjection #DDoS https://cvetodo.com/cve/CVE-2019-25462

    Post summary

    The post alerts to the high severity of CVE‑2019‑25462, noting its CVSS score and potential for SQL injection and DDoS, but offers no further technical or mitigation details.

    0000038
    20 followersView on X

Explore more

Back to dashboard