PT-2026-21310 · Part-Db · Part-Db

Marvoloo · Published 2026-02-20 · Updated 2026-02-20 · CVE-2019-25432

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Part-DB version 0.4

Description The application suffers from an authentication bypass. An unauthenticated attacker can log in by injecting SQL syntax into authentication parameters. Specifically, submitting a single quote followed by 'or' in the login form bypasses credential validation, granting unauthorized access. The vulnerable parameters are those used in the login form.

Recommendations Apply input validation and sanitization to all authentication parameters to prevent SQL injection attacks.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-25432

Affected Products

Part-Db

References · 6

• 🔥 https://exploit-db.com/exploits/47547 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25432 · Security Note
• https://osv.dev/vulnerability/CVE-2019-25432 · Vendor Advisory
• https://vulncheck.com/advisories/part-db-authentication-bypass-via-loginphp · Note
• https://t.me/cveNotify/152677 · Telegram Post
• https://github.com/Part-DB/Part-DB · Note