CVE-2019-25303: Thejshen Contentmanagementsystem

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

TheJshen ContentManagementSystem 1.04 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to extract or manipulate database information by crafting malicious query payloads.

Affected products

• Thejshen Contentmanagementsystem: version 1.04 only

Published 2026-02-06. Last modified 2026-06-17.