Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the category parameter. Attackers can send GET requests to the category endpoint with URL-encoded SQL UNION statements to extract database information including usernames, database names, and MySQL version details.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2019-25576 Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code… https://www.cve.org/CVERecord?id=CVE-2019-25576
Post summary
The post announces that Kepler Wallpaper Script 1.1 has an SQL injection flaw (CVE‑2019‑25576) but offers no proof of concept, exploit, or mitigation details.
CVE Alert: CVE-2019-25576 - Keplerwallpapers - Kepler Wallpaper Script - https://www.redpacketsecurity.com/cve-alert-cve-2019-25576-keplerwallpapers-kepler-wallpaper-script/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25576 #keplerwallpapers #kepler-wallpaper-script
Post summary
The tweet announces a CVE alert and links to a security page but provides no concrete details on exploitation, patches, or vulnerability specifics.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | keplerwallpapers | kepler_wallpaper_script | 1.1 | - | - |