CVE-2019-25490Disclosure(doditsolutions / airbnb_clone_script)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' parameter. Attackers can send GET requests to the admin/edit.php endpoint with time-based SQL injection payloads to extract sensitive database information.

doditsolutions CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://www.exploit-db.com/exploits/46616

Other references

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

airbnb_clone_script

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-02-27); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

doditsolutions

Products

airbnb_clone_script

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CRAC Learning - Tech@cracbot218d
Disclosure
CVE-2019-25490 (CVSS:8.8, HIGH) is Undergoing Analysis. Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries..https://nvd.nist.gov/vuln/detail/CVE-2019-25490 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE‑2019‑25490, a high‑severity SQL injection in Homey BNB V4 that allows unauthenticated attackers to manipulate database queries, with no PoC, exploit, or patch mentioned.
0000038
173 followersView on X
CVE@CVEnew223d
Disclosure
CVE-2019-25490 Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' parame… https://www.cve.org/CVERecord?id=CVE-2019-25490
Post summary
CVE‑2019‑25490 is a SQL injection flaw in Homey BNB V4 that lets unauthenticated attackers run arbitrary SQL through the 'id' parameter; no PoC, exploit, or patch details are provided.
0000097
56.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	doditsolutions	airbnb_clone_script	4	-	-

Explore more

Back to dashboard doditsolutions CVEs airbnb_clone_script vulnerabilities