CVE-2019-25490: Doditsolutions Airbnb Clone Script

High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' parameter. Attackers can send GET requests to the admin/edit.php endpoint with time-based SQL injection payloads to extract sensitive database information.

Affected products

• Doditsolutions Airbnb Clone Script: version 4 only

Published 2026-02-27. Last modified 2026-06-17.