CVE-2018-25394 - CVE House
Back to Database
Status published High CVE-2018-25394

Kados R10 GreenBee SQL Injection via update_release.php

Vulnerability Description

Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the release_id parameter of boards_buttons/update_release.php. The release_id value is concatenated directly into SQL statements without sanitization, allowing attackers to send a crafted GET request with a UNION-based payload to extract sensitive database information including the current user, database name, and DBMS version.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-25394

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Ihsan Sencan

References

More from Kados

View All →
CVE-2019-25704
Kados R10 GreenBee SQL Injection via filter_user_mail
High 8.8
CVE-2019-25702
Kados R10 GreenBee SQL Injection via id_project Parameter
High 8.8
CVE-2019-25700
Kados R10 GreenBee SQL Injection via sort_direction Parameter
High 8.8
CVE-2019-25698
Kados R10 GreenBee SQL Injection via id_to_delete Parameter
High 8.8
CVE-2019-25696
Kados R10 GreenBee SQL Injection via language_tag Parameter
High 8.8

Affected Vendor

Affected Software

Kados R10 GreenBee
Vulnerable Versions:
R10 GreenBee

Timeline

Official Publish: May 29th, 2026
Last Modified: June 2nd, 2026
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Weaknesses (CWE)

CWE-89

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1213.006 Databases
Collection
T1485 Data Destruction
Impact