phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the idn…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Mar 21, 2026 · NIST NVD

   Detected

   phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the idnews parameter. Attackers can send crafted GET requests to GeneratePDF.php with SQL payloads in the idnews parameter to extract sensitive database information or manipulate queries.

2. Oct 7, 2026 · NIST NVD

   Updated

   phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the idnews parameter. Attackers can send crafted GET requests to GeneratePDF.php with SQL payloads in the idnews parameter to extract sensitive database information or manipulate queries.

Affected

• cpe codnloc/phptransformer2016.9

Sources

• CVE.orgVulnerability recordCVE-2019-25578

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2019-25578

  phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the idnews parameter. Attackers can send crafted GET requests to GeneratePDF.php with SQL payloads in the idnews paramet

  nvd.nist.gov

References

• Product · phptransformer.com
• Broken Link · netcologne.dl.sourceforge.net
• Exploit · exploit-db.com
• Third Party Advisory · vulncheck.com