CVE-2019-25640

Inout Article Base CMS contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the 'p' and 'u' parameters. Attackers can inject SQL code using XOR-based payloads in GET requests to portalLogin.php to extract sensitive database information or cause denial of service through time-based attacks.

Score

CVSS 4.0 8.8 High

Status

Deferred - disclosure@vulncheck.com

Published

2026-03-24

Last modified

2026-03-24

Weaknesses

CWE-89

Affected products

• Inout Article Base Cms (Inoutscripts)

References

• https://www.exploit-db.com/exploits/46593
• https://www.inoutscripts.com/products/inout-article-base/
• https://www.vulncheck.com/advisories/inout-article-base-cms-lastest-sql-injection-via-portallogin-php