📄 Description (English)
Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the catid parameter. Attackers can send GET requests to the admin/cms_getpagetitle.php endpoint with malicious catid values to extract sensitive database information.
🤖 AI Executive Summary
CVE-2019-25491 is a critical SQL injection vulnerability in Homey BNB V4 affecting the admin/cms_getpagetitle.php endpoint. Unauthenticated attackers can inject malicious SQL code through the catid parameter to extract sensitive database information. With a CVSS score of 8.2 and no authentication required, this vulnerability poses an immediate threat to organizations using this platform.
📄 Description (Arabic)
🤖 AI Intelligence Analysis Analyzed: Apr 25, 2026 08:56
🇸🇦 Saudi Arabia Impact Assessment
This vulnerability primarily impacts Saudi hospitality and tourism sector organizations using Homey BNB V4 for property management and booking systems. At-risk sectors include: Tourism & Hospitality (hotels, vacation rentals), E-commerce platforms integrating Homey BNB, and small-to-medium enterprises (SMEs) in the travel sector. Potential exposure includes customer personal data, payment information, booking details, and property management credentials. Organizations under SAMA oversight using this platform for any financial transactions face additional compliance risks.
🏢 Affected Saudi Sectors
Hospitality & Tourism
E-commerce
Small-to-Medium Enterprises (SMEs)
Travel & Booking Services
Property Management
🎯 MITRE ATT&CK Techniques
⚖️ Saudi Risk Score (AI)
8.5
/ 10.0
🔧 Remediation Steps (English)
IMMEDIATE ACTIONS:
1. Identify all systems running Homey BNB V4 and isolate affected instances from production if possible
2. Review access logs for admin/cms_getpagetitle.php endpoint for suspicious activity (unusual catid parameters, SQL keywords)
3. Implement Web Application Firewall (WAF) rules to block SQL injection patterns in catid parameter
PATCHING:
1. Apply the available patch immediately to all Homey BNB V4 installations
2. Test patch in staging environment before production deployment
3. Verify patch effectiveness by attempting known SQL injection payloads
COMPENSATING CONTROLS (if patch delayed):
1. Restrict access to admin/cms_getpagetitle.php endpoint via IP whitelisting
2. Implement input validation: allow only numeric values for catid parameter
3. Use parameterized queries/prepared statements in application code
4. Enable database query logging and monitoring
DETECTION RULES:
1. Monitor for GET requests to admin/cms_getpagetitle.php with SQL keywords (UNION, SELECT, DROP, INSERT, etc.) in catid parameter
2. Alert on multiple failed database queries from single source IP
3. Track unusual database access patterns or data exfiltration attempts
🔧 خطوات المعالجة (العربية)
الإجراءات الفورية:
1. تحديد جميع الأنظمة التي تعمل بـ Homey BNB V4 وعزل الحالات المتأثرة عن الإنتاج إن أمكن
2. مراجعة سجلات الوصول لنقطة نهاية admin/cms_getpagetitle.php للبحث عن نشاط مريب (معاملات catid غير عادية، كلمات SQL)
3. تطبيق قواعد جدار حماية تطبيقات الويب (WAF) لحجب أنماط حقن SQL في معامل catid
التصحيح:
1. تطبيق التصحيح المتاح فوراً على جميع تثبيتات Homey BNB V4
2. اختبار التصحيح في بيئة التجريب قبل نشره في الإنتاج
3. التحقق من فعالية التصحيح بمحاولة حمولات حقن SQL المعروفة
الضوابط البديلة (إذا تأخر التصحيح):
1. تقييد الوصول إلى نقطة نهاية admin/cms_getpagetitle.php عبر قائمة بيضاء للعناوين
2. تطبيق التحقق من الإدخال: السماح فقط بالقيم الرقمية لمعامل catid
3. استخدام الاستعلامات المعاملة/البيانات المحضرة في كود التطبيق
4. تفعيل تسجيل واستراقاب استعلامات قاعدة البيانات
قواعد الكشف:
1. مراقبة طلبات GET إلى admin/cms_getpagetitle.php التي تحتوي على كلمات SQL (UNION, SELECT, DROP, INSERT, إلخ) في معامل catid
2. التنبيه على استعلامات قاعدة بيانات متعددة فاشلة من عنوان IP واحد
3. تتبع أنماط الوصول غير العادية لقاعدة البيانات أو محاولات تسرب البيانات
📋 Regulatory Compliance Mapping
🟢 NCA ECC 2024
A.14.2.1 - Secure development policy and procedures
A.14.2.5 - Secure development environment
A.13.1.3 - Segregation of networks
A.12.6.1 - Management of technical vulnerabilities
🔵 SAMA CSF
ID.BE-5 - Organizational resilience with respect to cybersecurity risk
PR.DS-6 - Integrity checking mechanisms
DE.CM-1 - The network is monitored to detect potential cybersecurity events
RS.MI-2 - Incidents are mitigated
🟡 ISO 27001:2022
A.12.2.1 - Implementation of secure development policy
A.12.6.1 - Management of technical vulnerabilities
A.14.2.1 - Secure development policy and procedures
A.13.1.1 - Network controls
🟣 PCI DSS v4.0.1
6.5.1 - Injection flaws prevention
6.2 - Security patches and updates
11.2 - Vulnerability scanning