CVE-2019-25492Disclosure(doditsolutions / airbnb_clone_script)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pt' parameter. Attackers can send GET requests to the admin/getcmsdata.php endpoint with malicious 'pt' values to extract sensitive database information.

doditsolutions CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://www.exploit-db.com/exploits/46616

Other references

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

airbnb_clone_script

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-02-27); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

doditsolutions

Products

airbnb_clone_script

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

CRAC Learning - Tech@cracbot219d
Disclosure
CVE-2019-25492 (CVSS:8.8, HIGH) is Undergoing Analysis. Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie..https://nvd.nist.gov/vuln/detail/CVE-2019-25492 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2019-25492, an SQL injection in Homey BNB V4 with a high CVSS score, highlighting its potential for unauthenticated database manipulation, but it does not mention exploitation or remediation.
0000039
173 followersView on X
CVE@CVEnew223d
Disclosure
CVE-2019-25492 Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pt' param… https://www.cve.org/CVERecord?id=CVE-2019-25492
Post summary
CVE-2019-25492 is an unauthenticated SQL injection vulnerability in Homey BNB V4 that allows attackers to inject code via the 'pt' parameter. No PoC, exploit, patch, or active exploitation details are provided.
0000096
56.6K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	doditsolutions	airbnb_clone_script	4	-	-

Explore more

Back to dashboard doditsolutions CVEs airbnb_clone_script vulnerabilities