What is CVE-2019-25462?

CVE-2019-25462 is a high-severity vulnerability in Web-Ofisi Rent A Car, classified under SQL Injection. CVSS score: 8.2/10. Published 2026-02-22.

How severe is CVE-2019-25462?

High severity. CVSS v3 base score is 8.2 out of 10.

SQL Injection in Web-Ofisi Rent A Car

CVE-2019-25462

Web Ofisi Rent a Car v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'klima' parameter. Attackers can send GET requests to with malicious 'klima' values to extract sensitive database information or cause denial of service.

Vulnerability class: SQL Injection

EPSS: 0.003 (17.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N.

Affected products

Web-ofisi Rent A Car — versions v3

Weakness classification (CWE)

CWE-89 — SQL Injection

References

disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2019-25462?: CVE-2019-25462 is a high-severity vulnerability in Web-Ofisi Rent A Car, classified under SQL Injection. CVSS score: 8.2/10. Published 2026-02-22.
How severe is CVE-2019-25462?: High severity. CVSS v3 base score is 8.2 out of 10.