CVE-2019-25693

HIGH SEVERITY

CVSS Score & Metrics

Base Score

7.1 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N                                    

Vulnerability Description

ResourceSpace 8.6 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the keywords parameter in collection_edit.php. Attackers can submit POST requests with crafted SQL payloads in the keywords field to extract sensitive database information including schema names, user credentials, and other confidential data.

Vulnerability Details

Published Date

April 12, 2026

Last Modified

April 13, 2026

CWE ID

CWE-352

Source

NVD

Vendor

Resourcespace

Product

ResourceSpace

External References

https://www.exploit-db.com/exploits/46274
https://www.resourcespace.com/
https://www.resourcespace.com/get
https://www.vulncheck.com/advisories/resourcespace-sql-injection-via-collection-edit-php

CVE-2019-25693

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment