CVE-2019-25669

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2019-25669", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-04-05T13:09:00.828Z", "datePublished": "2026-04-05T20:45:22.800Z", "dateUpdated": "2026-04-06T15:27:33.520Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-04-05T20:45:22.800Z"}, "datePublic": "2019-02-15T00:00:00.000Z", "title": "qdPM 9.1 SQL Injection via search_by_extrafields Parameter", "descriptions": [{"lang": "en", "value": "qdPM 9.1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the search_by_extrafields[] parameter. Attackers can send POST requests to the users endpoint with malicious search_by_extrafields[] values to trigger SQL syntax errors and extract database information."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "cweId": "CWE-89", "type": "CWE"}]}], "affected": [{"vendor": "Qdpm", "product": "qdPM", "versions": [{"version": "9.1", "status": "affected"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:qdpm:qdpm:9.2:*:*:*:*:*:*:*"}, {"vulnerable": true, "criteria": "cpe:2.3:a:qdpm:qdpm:8.3:*:*:*:*:*:*:*"}, {"vulnerable": true, "criteria": "cpe:2.3:a:qdpm:qdpm:9.0:*:*:*:*:*:*:*"}, {"vulnerable": true, "criteria": "cpe:2.3:a:qdpm:qdpm:9.1:*:*:*:*:*:*:*"}]}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 8.8, "baseSeverity": "HIGH", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS"}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "version": "3.1"}, "format": "CVSS"}], "references": [{"url": "https://www.exploit-db.com/exploits/46387", "name": "ExploitDB-46387", "tags": ["exploit"]}, {"url": "http://qdpm.net", "name": "Official Product Homepage", "tags": ["product"]}, {"url": "http://qdpm.net/download-qdpm-free-project-management", "name": "Product Reference", "tags": ["product"]}, {"name": "VulnCheck Advisory: qdPM 9.1 SQL Injection via search_by_extrafields Parameter", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/qdpm-sql-injection-via-search-by-extrafields-parameter"}], "credits": [{"lang": "en", "value": "Mehmet EMIROGLU", "type": "finder"}], "x_generator": {"engine": "vulncheck"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-06T15:22:51.910596Z", "id": "CVE-2019-25669", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-06T15:27:33.520Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"cna": {"title": "qdPM 9.1 SQL Injection via search_by_extrafields Parameter", "credits": [{"lang": "en", "type": "finder", "value": "Mehmet EMIROGLU"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.8, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Qdpm", "product": "qdPM", "versions": [{"status": "affected", "version": "9.1"}]}], "datePublic": "2019-02-15T00:00:00.000Z", "references": [{"url": "https://www.exploit-db.com/exploits/46387", "name": "ExploitDB-46387", "tags": ["exploit"]}, {"url": "http://qdpm.net", "name": "Official Product Homepage", "tags": ["product"]}, {"url": "http://qdpm.net/download-qdpm-free-project-management", "name": "Product Reference", "tags": ["product"]}, {"url": "https://www.vulncheck.com/advisories/qdpm-sql-injection-via-search-by-extrafields-parameter", "name": "VulnCheck Advisory: qdPM 9.1 SQL Injection via search_by_extrafields Parameter", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "vulncheck"}, "descriptions": [{"lang": "en", "value": "qdPM 9.1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the search_by_extrafields[] parameter. Attackers can send POST requests to the users endpoint with malicious search_by_extrafields[] values to trigger SQL syntax errors and extract database information."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:qdpm:qdpm:9.2:*:*:*:*:*:*:*", "vulnerable": true}, {"criteria": "cpe:2.3:a:qdpm:qdpm:8.3:*:*:*:*:*:*:*", "vulnerable": true}, {"criteria": "cpe:2.3:a:qdpm:qdpm:9.0:*:*:*:*:*:*:*", "vulnerable": true}, {"criteria": "cpe:2.3:a:qdpm:qdpm:9.1:*:*:*:*:*:*:*", "vulnerable": true}], "operator": "OR"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-04-05T20:45:22.800Z"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2019-25669", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-06T15:22:51.910596Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-04-06T15:22:53.369Z"}}]}, "cveMetadata": {"cveId": "CVE-2019-25669", "state": "PUBLISHED", "dateUpdated": "2026-04-05T20:45:22.800Z", "dateReserved": "2026-04-05T13:09:00.828Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2026-04-05T20:45:22.800Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "qdPM", "vendor": "Qdpm", "versions": [{"status": "affected", "version": "9.1"}]}], "source": "disclosure@vulncheck.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:qdpm:qdpm:*:*:*:*:*:*:*:*", "matchCriteriaId": "23E0AE8C-5310-4A59-BBED-3909BD330B30", "versionEndIncluding": "9.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "qdPM 9.1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the search_by_extrafields[] parameter. Attackers can send POST requests to the users endpoint with malicious search_by_extrafields[] values to trigger SQL syntax errors and extract database information."}, {"lang": "es", "value": "qdPM 9.1 contiene una vulnerabilidad de inyecci\u00f3n SQL que permite a los atacantes manipular consultas de la base de datos inyectando c\u00f3digo SQL a trav\u00e9s del par\u00e1metro search_by_extrafields[]. Los atacantes pueden enviar solicitudes POST al endpoint de usuarios con valores maliciosos de search_by_extrafields[] para desencadenar errores de sintaxis SQL y extraer informaci\u00f3n de la base de datos."}], "id": "CVE-2019-25669", "lastModified": "2026-10-06T22:10:00.247", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.2, "source": "disclosure@vulncheck.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.2, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2019-25669", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-06T15:22:51.910596Z", "version": "2.0.3"}}]}, "published": "2026-04-05T21:16:44.430", "references": [{"source": "disclosure@vulncheck.com", "tags": ["Product"], "url": "http://qdpm.net"}, {"source": "disclosure@vulncheck.com", "tags": ["Product"], "url": "http://qdpm.net/download-qdpm-free-project-management"}, {"source": "disclosure@vulncheck.com", "tags": ["Exploit", "VDB Entry"], "url": "https://www.exploit-db.com/exploits/46387"}, {"source": "disclosure@vulncheck.com", "tags": ["Third Party Advisory"], "url": "https://www.vulncheck.com/advisories/qdpm-sql-injection-via-search-by-extrafields-parameter"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "9.1"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "qdpm", "vendor": "qdpm"}], "analysis": {"en": {"generated_at": "2026-04-09T20:59:23.462153+00:00", "value": {"mitigation_remediation": ["Apply the latest qdPM update that addresses the SQL injection vulnerability.", "If no official patch is available, restrict or block public access to the /users endpoint or the search_by_extrafields parameter.", "Add application\u2011level input validation to sanitize the search_by_extrafields parameter and escape SQL characters.", "Monitor web server logs for anomalous POST requests containing malformed SQL statements.", "Ensure user accounts use strong authentication and limit database privileges to prevent broader compromise."], "summary": {"action": "Immediate Patch", "impact": "Data Compromise"}, "threat_synthesis": {"affected_systems": "Affected products are part of the Qdpm:qdPM family. CVE-2019-25669 specifically targets version 9.1, which is publicly documented. The product is also offered in 8.3, 9.0 and 9.2 variants, but only the 9.1 build is known to be vulnerable from the provided data. Administrators should verify whether their deployment runs the 9.1 release and check for newer versions that include the fix.", "description_and_impact": "The vulnerability is a classic SQL injection that lets attackers inject arbitrary SQL code into the search_by_extrafields[] parameter of the users endpoint. By sending crafted POST requests, an adversary can trigger syntax errors and pull sensitive database information, potentially exposing user data and configuration. The flaw aligns with CWE\u201189 and allows read or modify operations on the database, compromising confidentiality and integrity.", "risk_and_exploitability": "The CVSS score of 8.8 signals a high\u2011severity issue; the EPSS score of less than 1\u202f% indicates a low immediate likelihood of exploitation, yet a public exploit (46387) exists in exploit\u2011db. Remote attackers can reach the vulnerable endpoint over HTTP/HTTPS, send a POST request containing a malicious search_by_extrafields[] value, and extract or modify database contents. The flaw does not require privileged local access and can be leveraged in a typical web\u2011exposed environment."}}}}, "created": "2026-04-06T20:22:47.595800+00:00", "updated": "2026-04-10T09:45:26.046043+00:00", "vendors": ["qdpm", "qdpm$PRODUCT$qdpm"]}