CVE-2019-25694: high-severity vulnerability in Kados R10 GreenBee
Kados R10 GreenBee SQL Injection via user2reset
Published · Updated
41Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 8.8epss 0.4%
exploitation probability
0.4%top 68% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user2reset parameter. Attackers can send crafted requests with malicious SQL payloads to extract sensitive database information or modify data.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
Kados · Kados R10 GreenBeepublic PoCs found — 1
cve_referencewww.exploit-db.com/exploits/46505unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Kados R10 GreenBee
In the same product, most dangerous first.
CVE-2018-25395HIGHKados R10 GreenBee SQL Injection via update_feature.phpEPSS 0.3%CVE-2018-25394HIGHKados R10 GreenBee SQL Injection via update_release.phpEPSS 0.3%CVE-2019-25704HIGHKados R10 GreenBee SQL Injection via filter_user_mailEPSS 0.3%CVE-2019-25702HIGHKados R10 GreenBee SQL Injection via id_project ParameterEPSS 0.3%CVE-2019-25700HIGHKados R10 GreenBee SQL Injection via sort_direction ParameterEPSS 0.3%CVE-2019-25698HIGHKados R10 GreenBee SQL Injection via id_to_delete ParameterEPSS 0.3%