Skip to content
OpenAdvisories

Vendor

kostasmitroglou

4 known vulnerabilities.

Products

thesystem 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2019-25347

    thesystem App 1.0 - 'username' SQL Injection

    thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the username parameter. Attackers can inject malicious SQL code like ' or '1=1 to the username field to gain unauthorized access to user ac…

    kostasmitroglou thesystem
  • High 7.5
    CVE-2019-25346

    thesystem 1.0 - 'server_name' SQL Injection

    TheSystem 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the 'server_name' parameter. Attackers can inject malicious SQL code like ' or '1=1 to retrieve unauthorized database records and potentially a…

    kostasmitroglou thesystem