Executive brief
Listing Hub CMS, a web platform used for directory and business listings, contains a security flaw that allows unauthorized individuals to access its internal database. By sending a specially crafted web request, an attacker can steal sensitive information such as database credentials, usernames, and system version details. This could lead to a full compromise of the website's data and user accounts without requiring any login credentials.
Technical details
A SQL injection vulnerability exists in Listing Hub CMS 1.0 within the 'pages.php' component. The application fails to properly sanitize the 'id' GET parameter before using it in a database query. An unauthenticated remote attacker can exploit this by sending crafted HTTP GET requests containing malicious SQL payloads. Using error-based SQL injection techniques, the attacker can force the application to reveal sensitive information from the database, including the database name, user, and version string. No authentication or user interaction is required for exploitation.
Affected products
- ThemeRig Listing Hub CMS 1.0
Timeline
- 2019-02-14: disclosed: Initial discovery by researcher Deyaa Muhammad
- 2019-02-19: other: Exploit published on Exploit-DB (EDB-46419)
- 2026-06-04: advisory: CVE-2019-25730 published by NVD/VulnCheck