CVE-2019-25346 — thesystem 1.0 - 'server_name' SQL Injection
TheSystem 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the 'server_name' parameter. Attackers can inject malicious S…
Published: 2026-02-12 · CVSS: 7.1 · CVSS 4.0
TheSystem 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the 'server_name' parameter. Attackers can inject malicious SQL code like ' or '1=1 to retrieve unauthorized database records and potentially access sensitive system information.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7