Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
XooDigital Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'p' parameter. Attackers can send GET requests to results.php with malicious 'p' values to extract sensitive database information.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE Alert: CVE-2019-25509 - Xooscripts - XooDigital - https://www.redpacketsecurity.com/cve-alert-cve-2019-25509-xooscripts-xoodigital/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25509 #xooscripts #xoodigital
Post summary
The post simply announces a CVE alert for CVE-2019-25509 and provides a link, but gives no technical or exploitation details.
CVE-2019-25509 XooDigital Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'p' p… https://www.cve.org/CVERecord?id=CVE-2019-25509
Post summary
The post announces CVE-2019-25509 as an SQL injection flaw in XooDigital products that permits unauthenticated attackers to inject SQL through the 'p' parameter, per the referenced CVE record.