CVE-2019-25638 - CVE House
Back to Database
Status published High CVE-2019-25638

Meeplace Business Review Script Lastest SQL Injection via addclick.php

Vulnerability Description

Meeplace Business Review Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to the addclick.php endpoint with crafted SQL payloads in the 'id' parameter to extract sensitive database information or cause denial of service.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-25638

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Ahmet Ümit BAYRAM

Affected Vendor

Affected Software

Meeplace Business Review Script
Vulnerable Versions:
*

Timeline

Official Publish: March 24th, 2026
Last Modified: March 26th, 2026
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

Weaknesses (CWE)