https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-25543.htmlhttps://patchthecve.com/cve/CVE-2019-25543.htmlWed, 17 Jun 2026 02:32:38 +0000HIGH 8.2: Netartmedia Real Estate Portal 5.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parameter. Attackers can submit POST requests to index.php with malicious SQL payloads in the page field to bypass auhttps://patchthecve.com/cve/CVE-2019-25542.htmlhttps://patchthecve.com/cve/CVE-2019-25542.htmlWed, 17 Jun 2026 02:32:38 +0000HIGH 8.2: Netartmedia Real Estate Portal 5.0 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user_email parameter. Attackers can send POST requests to index.php with malicious payloads in the user_email field to bypahttps://patchthecve.com/cve/CVE-2019-25541.htmlhttps://patchthecve.com/cve/CVE-2019-25541.htmlWed, 17 Jun 2026 02:32:38 +0000HIGH 8.2: Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through unvalidated parameters. Attackers can inject time-based blind SQL payloads via the 'id' parameter in index.php or the 'Email' parameter in loginaction.https://patchthecve.com/cve/CVE-2019-25540.htmlhttps://patchthecve.com/cve/CVE-2019-25540.htmlWed, 17 Jun 2026 02:32:37 +0000HIGH 8.2: Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through various parameters. Attackers can craft malicious requests with SQL payloads to extract sensitive database information including https://patchthecve.com/cve/CVE-2019-25536.htmlhttps://patchthecve.com/cve/CVE-2019-25536.htmlWed, 17 Jun 2026 02:32:37 +0000HIGH 8.2: Netartmedia PHP Real Estate Agency 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the features[] parameter. Attackers can send POST requests to index.php with crafted SQL payloads in the features[