CVE-2019-25580

HIGH

ownDMS 4.7 SQL Injection via pdfstream.php imagestream.php

Title source: cna
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-25580. PoCs published by Ihsan Sencan.

AI-analyzed exploit summary The exploit demonstrates SQL injection vulnerabilities in ownDMS 4.7 via multiple endpoints, including `pdfstream.php`, `imagestream.php`, and `cashbook.php`. The PoC includes crafted HTTP requests with URL-encoded SQL payloads that extract data or execute arbitrary SQL commands.

Description

ownDMS 4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the IMG parameter. Attackers can send GET requests to pdfstream.php, imagestream.php, or anyfilestream.php with crafted SQL payloads in the IMG parameter to extract sensitive database information including version and database names.

Exploits (1)

exploitdb WORKING POC
by Ihsan Sencan · textwebappsphp
https://www.exploit-db.com/exploits/46168

The exploit demonstrates SQL injection vulnerabilities in ownDMS 4.7 via multiple endpoints, including `pdfstream.php`, `imagestream.php`, and `cashbook.php`. The PoC includes crafted HTTP requests with URL-encoded SQL payloads that extract data or execute arbitrary SQL commands.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: ownDMS 4.7
No auth needed
Prerequisites: Network access to the target application · Vulnerable ownDMS 4.7 installation
devstral-2 · analyzed Mar 21, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit exploit
ExploitDB-46168
https://www.exploit-db.com/exploits/46168
Product product
Official Product Homepage
http://www.owndms.com/
Third Party Advisory third-party-advisory
VulnCheck Advisory: ownDMS 4.7 SQL Injection via pdfstream.php imagestream.php
https://www.vulncheck.com/advisories/owndms-sql-injection-via-pdfstream-php-imagestream-php

Scores

CVSS v3 8.2
EPSS 0.0032
EPSS Percentile 24.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-434
Status published
Products (2)
owndms/owndms < 4.7
Owndms/ownDMS 4.7
Published Mar 21, 2026
Tracked Since Mar 21, 2026