CVE-2019-25539

CVE-2019-25539 is a blind SQL injection vulnerability present in 202CMS v10 beta, specifically affecting konradpl99 202cms. This flaw allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log_user parameter in POST requests to index.php. Rated with a CVSS v3.1 score of 8.2 (HIGH), it presents a network attack vector with low complexity, requiring no privileges or user interaction. The primary impact is high confidentiality, enabling the extraction of sensitive database information using time-based blind injection techniques. There is currently no evidence of active exploitation, no public exploit code available, and minimal community discussion or media coverage surrounding this vulnerability.