CVE-2019-25493Disclosure(doditsolutions / airbnb_clone_script)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'val' parameter. Attackers can send GET requests to the admin/getrecord.php endpoint with malicious 'val' values to extract sensitive database information.

doditsolutions CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://www.exploit-db.com/exploits/46616

Other references

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

airbnb_clone_script

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked 1d ago at 2 mentions (2026-02-27); latest day: 1
3 total mentions across 2 days

Affected systems

Vendors

doditsolutions

Products

airbnb_clone_script

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-27	2	Disclosure2
2026-03-04	1	Disclosure1

Full discourse3 posts

CRAC Learning - Tech@cracbot220d
Disclosure
CVE-2019-25493 (CVSS:8.8, HIGH) is Undergoing Analysis. Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database querie..https://nvd.nist.gov/vuln/detail/CVE-2019-25493 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2019-25493, an SQL injection vulnerability in Homey BNB V4 with a CVSS score of 8.8, but provides no PoC, exploit, patch, or active exploitation details.
0000042
173 followersView on X
CVE@CVEnew224d
Disclosure
CVE-2019-25493 Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'val' para… https://www.cve.org/CVERecord?id=CVE-2019-25493
Post summary
The tweet provides a brief disclosure of CVE‑2019‑25493, an SQL injection vulnerability in Homey BNB V4 that allows unauthenticated attackers to inject SQL via the 'val' parameter.
00000101
56.6K followersView on X
CyberDudeBivash® | Global Cybersecurity Company@cyberbivash224d
Disclosure
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2019-25493 - Homey BNB V4 SQL Injection via getrecord.php Intel Report: https://ift.tt/2ceghY1
Post summary
The alert announces CVE-2019-25493, a SQL injection vulnerability in Homey BNB V4 via getrecord.php, and provides a link to an Intel report.
0000012
341 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	doditsolutions	airbnb_clone_script	4	-	-

Explore more

Back to dashboard doditsolutions CVEs airbnb_clone_script vulnerabilities