CVE-2019-25730

HIGH

Listing Hub CMS 1.0 SQL Injection via pages.php id

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2019-25730 has a selected CVSS score of 8.8 (high); EIP currently links 1 catalogued exploit.

Description

Listing Hub CMS 1.0 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to pages.php with crafted id values using error-based SQL injection techniques to extract database credentials, usernames, and version information.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jun 4, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Listing Hub CMS

Browse Themerig / Listing Hub CMS
CVE List1.0affected

Proofs of concept

1

Catalogued exploits

ExploitDBListing Hub CMS 1.0 - 'pages.php id' SQL InjectionExploitDB exploitby Deyaa MuhammadNot analyzed1 file
ExploitDB
PoC details

References

6