SQL Injection Vulnerability in Fiverr Clone Script by Fiverr
CVE-2019-25444

8.8HIGH

Key Information:

Vendor

PHPscriptsmall

Status
Fiverr Clone Script
Vendor
CVE Published:
20 February 2026

Badges

👾 Exploit Exists

What is CVE-2019-25444?

The Fiverr Clone Script version 1.2.2 is vulnerable to SQL injection attacks due to improper validation of the 'page' parameter. This flaw allows attackers to inject malicious SQL queries, potentially leading to the extraction of sensitive information from the database or unauthorized modification of its contents. The vulnerability can be exploited without authentication, making it critical for users of the Fiverr Clone Script to implement necessary safeguards and updates to protect their databases and sensitive data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Fiverr Clone Script 1.2.2

References

https://www.exploit-db.com/exploits/46637
exploit
https://www.vulncheck.com/advisories/fiverr-clone-script-...
third-party-advisory

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mr Winst0n
JSON
.