CVE-2019-25730

Listing Hub CMS 1.0 SQL Injection via pages.php id

Published Jun 4, 2026 CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Description

Listing Hub CMS 1.0 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to pages.php with crafted id values using error-based SQL injection techniques to extract database credentials, usernames, and version information.

Analysis

Technical impact

The vulnerability is an unauthenticated SQL injection in Listing Hub CMS 1.0, where the id parameter of pages.php is not validated. Attackers can send crafted GET requests using error‑based techniques to execute arbitrary SQL statements. This allows extraction of sensitive data such as database usernames, passwords, and version information, essentially compromising the integrity and confidentiality of the underlying database.

Affected Systems

Only the 1.0 release of Listing Hub CMS from Themerig is known to contain this flaw. No other versions or related products are listed; the vendor’s advisory specifically cites version 1.0. Therefore systems running this version of the CMS are impacted.

Risk and Exploitability

The CVSS score of 8.8 indicates a high severity, and although the EPSS score is not available, the nature of the vulnerability suggests a readily exploitable attack path via an HTTP GET request. The flaw is not cataloged in the CISA KEV list, but it remains a significant risk because it can be triggered remotely without authentication. Following the vendor’s recommendation to apply a patch or upgrade is essential to eliminate this risk.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Themerig

Listing Hub CMS

affected

Version	Status	Constraints
`1.0`	affected	—

No data.

Vendor Product Versions

Themerig

Listing Hub Cms

Version	Status	Scheme	Platform
`1.0`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the vendor’s patch or upgrade Listing Hub CMS to a version where the id parameter is properly validated.
In the meantime, block or rate‑limit access to pages.php or strip the id parameter using web‑server configuration to prevent injection attempts.
Ensure that the application layer validates all incoming parameters and uses parameterized queries to avoid future SQL injection vectors.

Generated by OpenCVE AI on June 4, 2026 at 14:39 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact Low

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact Low

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.270% probability within 30 days)

Exploitation poc

Automatable yes

Technical Impact partial

References

Link	Providers
https://codecanyon.net/item/listing-hub-cms-directory-listings-theme/21361294
https://listing-hub.themerig.com
https://themerig.com/
https://www.exploit-db.com/exploits/46419
https://www.vulncheck.com/advisories/listing-hub-cms-sql-injection-via-pages-php-id

History

Jun 5, 2026 10:45 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Themerig Themerig listing Hub Cms
Vendors & Products		Themerig Themerig listing Hub Cms

Jun 4, 2026 3:15 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Jun 4, 2026 1:30 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Listing Hub CMS 1.0 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to pages.php with crafted id values using error-based SQL injection techniques to extract database credentials, usernames, and version information.
Title		Listing Hub CMS 1.0 SQL Injection via pages.php id
Weaknesses		CWE-89
References		https://codecanyon.net/item/listing-hub-cms-directory-listings-theme/21361294 https://listing-hub.themerig.com https://themerig.com/ https://www.exploit-db.com/exploits/46419 https://www.vulncheck.com/advisories/listing-hub-cms-sql-injection-via-pages-php-id
Metrics		cvssV3_1 `{'score': 8.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N'}` cvssV4_0 `{'score': 8.8, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N'}`