Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ownDMS 4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the IMG parameter. Attackers can send GET requests to pdfstream.php, imagestream.php, or anyfilestream.php with crafted SQL payloads in the IMG parameter to extract sensitive database information including version and database names.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-21 | 1 | Disclosure1 |
| 2026-03-22 | 2 | Disclosure2 |
CVE-2019-25580 ownDMS 4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the IMG … https://www.cve.org/CVERecord?id=CVE-2019-25580
Post summary
The post discloses an SQL injection flaw in ownDMS 4.7 that lets unauthenticated users run arbitrary SQL via the IMG input, with no evidence of exploitation or patches.
CVE Alert: CVE-2019-25580 - Owndms - ownDMS - https://www.redpacketsecurity.com/cve-alert-cve-2019-25580-owndms-owndms/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25580 #owndms #
Post summary
The tweet announces CVE-2019-25580 with a link to a security alert, focusing on the initial disclosure of the vulnerability.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2019-25580 - ownDMS 4.7 SQL Injection via pdfstream.php imagestream.php Intel Report: https://ift.tt/HDCQk1s
Post summary
The tweet alerts to CVE‑2019‑25580 as an SQL injection in ownDMS 4.7 via the pdfstream.php and imagestream.php scripts, with a link to an intel report for additional details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | owndms | owndms | - | - | - |