Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2019-25347

thesystem App 1.0 - 'username' SQL Injection

Description

thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the username parameter. Attackers can inject malicious SQL code like ' or '1=1 to the username field to gain unauthorized access to user accounts.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

kostasmitroglou thesystem

  • 1.0affected

References