Description
News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the news ID parameter. Attackers can send GET requests to index.php/show/news/ with malicious SQL statements to extract sensitive database information.
Published: 2026-04-05
Score: 8.8 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sun, 05 Apr 2026 20:45:00 +0000

Type Values Removed Values Added
Description News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the news ID parameter. Attackers can send GET requests to index.php/show/news/ with malicious SQL statements to extract sensitive database information.
Title News Website Script 2.0.5 SQL Injection via index.php
First Time appeared News Website Script Project
News Website Script Project news Website Script
Weaknesses CWE-89
CPEs cpe:2.3:a:news_website_script_project:news_website_script:2.0.5:*:*:*:*:*:*:*
Vendors & Products News Website Script Project
News Website Script Project news Website Script
References
Metrics cvssV3_1

{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N'}

cvssV4_0

{'score': 8.8, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

News Website Script Project News Website Script
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-04-05T20:45:22.070Z

Reserved: 2026-04-05T13:06:58.747Z

Link: CVE-2019-25668

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-04-05T21:16:44.240

Modified: 2026-04-05T21:16:44.240

Link: CVE-2019-25668

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses