CVE-2019-25347 — thesystem App 1.0 - 'username' SQL Injection
thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the username parameter. Attackers can inject malicious SQ…
Published: 2026-02-12 · CVSS: 7.1 · CVSS 4.0
thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the username parameter. Attackers can inject malicious SQL code like ' or '1=1 to the username field to gain unauthorized access to user accounts.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7