CVE-2019-25490

🗓️ 27 Feb 2026 17:23:32Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 12 Views🌐 WEB

SQL injection in Homey BNB V4 allows unauthenticated access via admin/edit.php id parameter to extract data.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2019-25490	27 Feb 202617:23	–	attackerkb
Circl	CVE-2019-25490	27 Feb 202621:03	–	circl
CNNVD	Doditsolutions Homey BNB SQL注入漏洞	27 Feb 202600:00	–	cnnvd
Cvelist	CVE-2019-25490 Homey BNB V4 SQL Injection via admin edit.php	27 Feb 202617:23	–	cvelist
EUVD	EUVD-2019-19716	27 Feb 202618:31	–	euvd
NVD	CVE-2019-25490	27 Feb 202618:16	–	nvd
OSV	CVE-2019-25490	27 Feb 202618:16	–	osv
Positive Technologies	PT-2026-22358	27 Feb 202600:00	–	ptsecurity
RedhatCVE	CVE-2019-25490	28 Feb 202619:45	–	redhatcve
Vulnrichment	CVE-2019-25490 Homey BNB V4 SQL Injection via admin edit.php	27 Feb 202617:23	–	vulnrichment

NVD

Vulners

Node

doditsolutions airbnb_clone_scriptMatch4

[
  {
    "vendor": "Doditsolutions",
    "product": "Homey BNB (Airbnb Clone Script)",
    "versions": [
      {
        "version": "V4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/46616
vulncheck	www.vulncheck.com/advisories/homey-bnb-sql-injection-via-admin-editphp
doditsolutions	www.doditsolutions.com/airbnb-clone-script/

Parameter	Position	Path	Description	CWE
id	query param	admin/edit.php	SQL injection vulnerability via the id parameter in admin/edit.php allows time-based payloads to manipulate queries and extract data.	CWE-89

17 Jun 2026 02:32Current

6Medium risk

Vulners AI Score6

CVSS 3.17.5 - 8.2

CVSS 48.8

EPSS0.00321

SSVC

CWE-89