CVE-2019-25491Disclosure(doditsolutions / airbnb_clone_script)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the catid parameter. Attackers can send GET requests to the admin/cms_getpagetitle.php endpoint with malicious catid values to extract sensitive database information.

doditsolutions CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://www.exploit-db.com/exploits/46616

Other references

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

airbnb_clone_script

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-02-27); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

doditsolutions

Products

airbnb_clone_script

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CRAC Learning - Tech@cracbot218d
Disclosure
CVE-2019-25491 (CVSS:8.8, HIGH) is Undergoing Analysis. Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie..https://nvd.nist.gov/vuln/detail/CVE-2019-25491 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE‑2019‑25491, an SQL injection flaw in Homey BNB V4 with high severity, but provides no evidence of exploitation, patch, or PoC.
0000035
173 followersView on X
CVE@CVEnew222d
Disclosure
CVE-2019-25491 Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the catid para… https://www.cve.org/CVERecord?id=CVE-2019-25491
Post summary
The tweet announces CVE-2019-25491 as an SQL injection in Homey BNB V4, noting that unauthenticated attackers can inject SQL through the catid parameter.
0000093
56.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	doditsolutions	airbnb_clone_script	4	-	-

Explore more

Back to dashboard doditsolutions CVEs airbnb_clone_script vulnerabilities