CVE-2019-25765
Received Received - Intake

SQL Injection in ASP-CMS via commentList.asp

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: VulnCheck

Description
ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script. Attackers can bypass the application's keyword blocklist by interleaving the string 'master' within blocked SQL terms to extract sensitive database contents. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-18 (UTC).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-13
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
CVE-2019-25765
EUVD
EUVD-2019-20201

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a SQL injection flaw in ASP-CMS's commentList.asp endpoint. It allows unauthenticated remote attackers to inject malicious SQL commands by manipulating the 'id' parameter in GET requests. Attackers bypass keyword blocklists by inserting the string 'master' within blocked SQL terms to extract sensitive database contents.

Detection Guidance

To detect this vulnerability, you can send crafted GET requests to the commentList.asp endpoint with the id parameter containing SQL injection payloads. For example, use curl commands like: curl 'http://target.com/commentList.asp?id=1%27master%27' or check for responses containing database-related strings such as 'clistbox' or 'UserID,GroupID,LoginName,Password'.

Impact Analysis

This vulnerability can lead to unauthorized access to sensitive database information, including data extraction or manipulation. Attackers could bypass authentication, steal credentials, or access confidential data stored in the database.

Compliance Impact

This vulnerability could lead to data breaches, violating GDPR and HIPAA requirements for protecting personal and health information. Organizations may face legal penalties, reputational damage, and loss of compliance certifications due to unauthorized data exposure.

Mitigation Strategies

Immediately apply input validation and strict filtering for the id parameter in the commentList.asp endpoint. Deploy a Web Application Firewall (WAF) to monitor and block malicious SQL injection attempts. Upgrade to the latest version of ASP-CMS if available. Temporarily restrict access to the commentList.asp endpoint if possible.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2019-25765. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart