Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SimplePress CMS 1.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'p' and 's' parameters. Attackers can send GET requests with crafted SQL payloads to extract sensitive database information including usernames, database names, and version details.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2019-25575 SimplePress CMS 1.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throu… https://www.cve.org/CVERecord?id=CVE-2019-25575
Post summary
The statement discloses that SimplePress CMS 1.0.7 has a vulnerable SQL injection flaw that permits unauthenticated attackers to execute arbitrary SQL queries.
CVE Alert: CVE-2019-25575 - Sourceforge - SimplePress CMS - https://www.redpacketsecurity.com/cve-alert-cve-2019-25575-sourceforge-simplepress-cms/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25575 #sourceforge #simplepress-cms
Post summary
An alert post linking to a resource on CVE‑2019‑25575 for SimplePress CMS; no additional details on exploitation or mitigation are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | simplepresscms | simplepress_cms | - | - | - |