PT-2026-7882 · Kostasmitroglou · Password Management Application+1

Sadik Cetin · Published 2026-02-12 · Updated 2026-03-02 · CVE-2019-25346

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions TheSystem version 1.0

Description The software contains a SQL injection flaw that enables attackers to bypass authentication. This is achieved by manipulating the server name parameter to inject malicious SQL code, such as ' or '1=1', allowing unauthorized access to database records and potentially sensitive system information.

Recommendations Apply input validation and sanitization to the server name parameter to prevent the injection of malicious SQL code.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-25346

Affected Products

Password Management Application

Thesystem

References · 7

• 🔥 https://exploit-db.com/exploits/47430 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25346 · Security Note
• https://osv.dev/vulnerability/CVE-2019-25346 · Vendor Advisory
• https://github.com/kostasmitroglou/thesystem · Note
• https://t.me/cveNotify/153754 · Telegram Post
• https://vulncheck.com/advisories/thesystem-servername-sql-injection · Note
• https://t.me/cveNotify/153524 · Telegram Post