NoviSmart CMS SQL Injection via Referer HTTP Header
Vulnerability Description
NoviSmart CMS contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the Referer HTTP header field. Attackers can craft requests with time-based SQL injection payloads in the Referer header to extract sensitive database information or cause denial of service.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-25439
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- n1x_ [MS-WEB]
Affected Vendor
Novismart
View all reports →