PT-2026-44873 · Undefined · Undefined

CVE-2018-25395 · Published 2026-05-29 · Updated 2026-07-21

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Kados R10 GreenBee (affected versions not specified)

Description An SQL injection issue exists that allows unauthenticated attackers to execute arbitrary SQL queries. This occurs because the feature id parameter in the 'boards buttons/update feature.php' endpoint is concatenated directly into SQL statements without proper sanitization. Attackers can use a crafted GET request with a UNION-based payload to extract sensitive information from the database, such as the current user, the database name, and the DBMS version.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the feature id parameter in the 'boards buttons/update feature.php' endpoint until the issue is resolved.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2018-25395

Affected Products

Undefined

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2018-25395 · Security Note
• https://vulncheck.com/advisories/kados-r10-greenbee-sql-injection-via-update-feature-php · Note
• https://exploit-db.com/exploits/45617 · Note
• https://t.me/cveNotify/209115 · Telegram Post
• https://sourceforge.net/projects/kados · Note
• https://kados.info · Note