152 matches found
CVE-2019-25347 thesystem App 1.0 - 'username' SQL Injection
thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the username parameter. Attackers can inject malicious SQL code like ' or '1=1 to the username field to gain unauthorized access to user accounts...
7.5CVSS5.9AI score0.00454EPSS
SaveExploits1References3
20