CVE-2019-25694

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2019-25694
Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user2reset parameter. Attackers can send crafted requests with malicious SQL payloads to extract sensitive database information or modify data.

8.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 4.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://sourceforge.net/projects/kados/ Product
https://www.exploit-db.com/exploits/46505 Exploit VDB Entry
https://www.kados.info/ Product
https://www.vulncheck.com/advisories/kados-r10-greenbee-sql-injection-via-user2reset Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:marmotech:kados:r10_greenbee:*:*:*:*:*:*:*
History

24 Jul 2026, 22:10

Type Values Removed Values Added
Summary
  • (es) Kados R10 GreenBee contiene una vulnerabilidad de inyección SQL que permite a atacantes no autenticados manipular consultas de la base de datos inyectando código SQL a través del parámetro user2reset. Los atacantes pueden enviar solicitudes manipuladas con cargas útiles SQL maliciosas para extraer información sensible de la base de datos o modificar datos.

07 Apr 2026, 16:49

Type Values Removed Values Added
CPE cpe:2.3:a:marmotech:kados:r10_greenbee:*:*:*:*:*:*:*
References () https://sourceforge.net/projects/kados/ - () https://sourceforge.net/projects/kados/ - Product
References () https://www.exploit-db.com/exploits/46505 - () https://www.exploit-db.com/exploits/46505 - Exploit, VDB Entry
References () https://www.kados.info/ - () https://www.kados.info/ - Product
References () https://www.vulncheck.com/advisories/kados-r10-greenbee-sql-injection-via-user2reset - () https://www.vulncheck.com/advisories/kados-r10-greenbee-sql-injection-via-user2reset - Third Party Advisory
First Time Marmotech
Marmotech kados

05 Apr 2026, 21:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-04-05 21:16

Updated : 2026-07-24 22:10

NVD link : CVE-2019-25694

Mitre link : CVE-2019-25694

CVE.ORG link : CVE-2019-25694

JSON object : View

Products Affected

marmotech

  • kados
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')