PT-2026-7882 · Kostasmitroglou · Password Management Application+1

Sadik Cetin · Publicado 2026-02-12 · Atualizado 2026-03-02 · CVE-2019-25346

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TheSystem version 1.0

Description The software contains a SQL injection flaw that enables attackers to bypass authentication. This is achieved by manipulating the server name parameter to inject malicious SQL code, such as ' or '1=1', allowing unauthorized access to database records and potentially sensitive system information.

Recommendations Apply input validation and sanitization to the server name parameter to prevent the injection of malicious SQL code.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2019-25346

Produtos afetados

Password Management Application

Thesystem

Referências · 7

• 🔥 https://exploit-db.com/exploits/47430 · Exploit
• https://github.com/kostasmitroglou/thesystem · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25346 · Nota de Segurança
• https://t.me/cveNotify/153754 · Publicação no Telegram
• https://vulncheck.com/advisories/thesystem-servername-sql-injection · Nota
• https://osv.dev/vulnerability/CVE-2019-25346 · Aviso do Fabricante
• https://t.me/cveNotify/153524 · Publicação no Telegram