CVE-2019-25694 - CVE House
Back to Database
Status published High CVE-2019-25694

Kados R10 GreenBee SQL Injection via user2reset

Vulnerability Description

Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user2reset parameter. Attackers can send crafted requests with malicious SQL payloads to extract sensitive database information or modify data.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-25694

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Mehmet EMIROGLU

References

More from Kados

View All →
CVE-2019-25704
Kados R10 GreenBee SQL Injection via filter_user_mail
High 8.8
CVE-2019-25702
Kados R10 GreenBee SQL Injection via id_project Parameter
High 8.8
CVE-2019-25700
Kados R10 GreenBee SQL Injection via sort_direction Parameter
High 8.8
CVE-2019-25698
Kados R10 GreenBee SQL Injection via id_to_delete Parameter
High 8.8
CVE-2019-25696
Kados R10 GreenBee SQL Injection via language_tag Parameter
High 8.8

Affected Vendor

Affected Software

Kados R10 GreenBee
Vulnerable Versions:
R10 GreenBee

Timeline

Official Publish: April 5th, 2026
Last Modified: April 6th, 2026
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Weaknesses (CWE)

CWE-89

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1213.006 Databases
Collection
T1485 Data Destruction
Impact