Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Clinic Pro contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the month parameter. Attackers can send POST requests to the monthly_expense_overview endpoint with crafted month values using boolean-based blind, time-based blind, or error-based SQL injection techniques to extract sensitive database information.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2019-25473 Clinic Pro contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the month parameter… https://www.cve.org/CVERecord?id=CVE-2019-25473
Post summary
The post provides a brief disclosure of CVE-2019‑25473, noting a SQL injection in Clinic Pro, with a link to the CVE record, but includes no exploitation evidence or mitigations.
CVE Alert: CVE-2019-25473 - Softwebinternational - Clinic Pro - https://www.redpacketsecurity.com/cve-alert-cve-2019-25473-softwebinternational-clinic-pro/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25473 #softwebinternational #clinic-pro
Post summary
The tweet references a CVE alert link but does not provide any technical, exploit, or mitigation details.