High severity7.5NVD Advisory· Published Feb 12, 2026· Updated Jun 17, 2026
CVE-2019-25347
CVE-2019-25347
Description
thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the username parameter. Attackers can inject malicious SQL code like ' or '1=1 to the username field to gain unauthorized access to user accounts.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: 1.0
- cpe:2.3:a:kostasmitroglou:password_management_application:1.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
2- www.exploit-db.com/exploits/47432nvdExploitVDB Entry
- www.vulncheck.com/advisories/thesystem-app-username-sql-injectionnvdThird Party Advisory
News mentions
0No linked articles in our index yet.