Password Management Application CVEs and Security Vulnerabilities

CVE-2019-25347

thesystem App 1.0 - 'username' SQL Injection

thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the username parameter. Attackers can inject malicious SQL code like ' or '1=1 to the username field to gain unauthorized access to user accounts.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Kostasmitroglou

Products

Password Management Application Thesystem

CVE-2019-25346

thesystem 1.0 - 'server_name' SQL Injection

TheSystem 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the 'server_name' parameter. Attackers can inject malicious SQL code like ' or '1=1 to retrieve unauthorized database records and potentially access sensitive system information.