CVE-2019-25444

Fiverr Clone Script 1.2.2 SQL Injection via page Parameter

Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the page parameter. Attackers can supply malicious SQL syntax in the page parameter to extract sensitive database information or modify database contents.

Affected

Phpscriptsmall · Fiverr Clone Script

CVSS v4.0 VULNCHECK

8.8 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1 NVD

9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS

0.43% chance of exploitation in the next 30 days, 36th percentile

Published

2026-02-20

Updated

2026-04-07

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/46637

Security advisories

• https://www.vulncheck.com/advisories/fiverr-clone-script-sql-injection-via-page-parameter

References

• CVE Record
• NVD entry