High severity7.5NVD Advisory· Published Feb 12, 2026· Updated Jun 17, 2026
CVE-2019-25346
CVE-2019-25346
Description
TheSystem 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the 'server_name' parameter. Attackers can inject malicious SQL code like ' or '1=1 to retrieve unauthorized database records and potentially access sensitive system information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: 1.0
- cpe:2.3:a:kostasmitroglou:password_management_application:1.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- www.exploit-db.com/exploits/47430nvdExploitVDB Entry
- www.vulncheck.com/advisories/thesystem-servername-sql-injectionnvdBroken Link
News mentions
0No linked articles in our index yet.