TI-2019-15721 CVE-2019-25668 · GHSA-wr46-gg95-jg49News Website Script 2.0.5 SQL Injection via index.phpPriority HIGH 77News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the news ID parameter.CVSS 4.0HIGH 8.8· Network · No auth · No interaction · EPSS 0.00416 · Published 2026-04-05 · No fix listed CWE-89