CVE-2019-25303

HIGH 7.1

TheJshen contentManagementSystem 1.04 - 'id' SQL Injection

CVSS Score

7.1

EPSS Score

0.0%

EPSS Percentile

0th

TheJshen ContentManagementSystem 1.04 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to extract or manipulate database information by crafting malicious query payloads.

CWE	CWE-89
Vendor	thejshen
Product	contentmanagementsystem
Published	Feb 6, 2026
Last Updated	Jul 15, 2026

Stay Ahead of the Next One

Get instant alerts for thejshen contentmanagementsystem

Be the first to know when new high vulnerabilities affecting thejshen contentmanagementsystem are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

Affected Versions

thejshen / contentManagementSystem

1.04

References

NVD ↗ CVE.org ↗ EPSS Data ↗

exploit-db.com: https://www.exploit-db.com/exploits/47569 github.com: https://github.com/thejshen/contentManagementSystem vulncheck.com: https://www.vulncheck.com/advisories/thejshen-contentmanagementsystem-id-sql-injection

Credits

Cakes