CVE-2019-25346

CVE-2019-25346 pertains to TheSystem 1.0, with a SQL injection in the server_name parameter that enables authentication bypass. The vulnerability allows an attacker to inject SQL like ' or '1=1' to retrieve unauthorized database records and potentially access sensitive system information. Multipl...

CVE-2019-25347

CVE-2019-25347 affects the System: thesystem App 1.0. The vulnerability is a SQL injection in the username parameter that allows bypassing authentication and gaining unauthorized access to user accounts. The issue is exploitable remotely (network), with low attack complexity and no privileges req...