CVE-2019-25636

CVE-2019-25636 is an unauthenticated SQL injection vulnerability affecting Zeeways Jobsite CMS. Attackers can exploit this by injecting malicious SQL code into the 'id' GET parameter of specific pages, such as news_details.php, to manipulate database queries and extract sensitive information. Rated 8.2 HIGH on the CVSS scale, this vulnerability is remotely exploitable with low complexity, requiring no user interaction or privileges, and primarily impacts confidentiality. Despite its high severity, there is no evidence of active exploitation, public exploit code availability (Metasploit, ExploitDB), or significant community discussion, suggesting a low probability of in-the-wild exploitation.