Unrated severityNVD Advisory· Published Feb 12, 2026· Updated Mar 2, 2026
thesystem 1.0 - 'server_name' SQL Injection
CVE-2019-25346
Description
TheSystem 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the 'server_name' parameter. Attackers can inject malicious SQL code like ' or '1=1 to retrieve unauthorized database records and potentially access sensitive system information.
Affected products
1- Range: 1.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.exploit-db.com/exploits/47430mitreexploit
- www.vulncheck.com/advisories/thesystem-servername-sql-injectionmitrethird-party-advisory
News mentions
0No linked articles in our index yet.