PT-2026-21310 · Part-Db · Part-Db

Marvoloo · Publicado 2026-02-20 · Atualizado 2026-02-20 · CVE-2019-25432

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Part-DB version 0.4

Description The application suffers from an authentication bypass. An unauthenticated attacker can log in by injecting SQL syntax into authentication parameters. Specifically, submitting a single quote followed by 'or' in the login form bypasses credential validation, granting unauthorized access. The vulnerable parameters are those used in the login form.

Recommendations Apply input validation and sanitization to all authentication parameters to prevent SQL injection attacks.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2019-25432

Produtos afetados

Part-Db

Referências · 6

• 🔥 https://exploit-db.com/exploits/47547 · Exploit
• https://vulncheck.com/advisories/part-db-authentication-bypass-via-loginphp · Nota
• https://t.me/cveNotify/152677 · Publicação no Telegram
• https://github.com/Part-DB/Part-DB · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25432 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-25432 · Aviso do Fabricante