Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2019-25346

thesystem 1.0 - 'server_name' SQL Injection

Description

TheSystem 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the 'server_name' parameter. Attackers can inject malicious SQL code like ' or '1=1 to retrieve unauthorized database records and potentially access sensitive system information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

kostasmitroglou thesystem

  • 1.0affected

References