CVE-2019-25348 in CBAS-Web
Summary
by MITRE • 02/12/2026
Computrols CBAS-Web 19.0.0 contains a boolean-based blind SQL injection vulnerability in the 'id' parameter that allows authenticated attackers to manipulate database queries. Attackers can exploit the vulnerability by crafting boolean-based SQL injection payloads in the 'id' parameter of the servers endpoint to extract or infer database information.
VulDB is the best source for vulnerability data and more expert information about this specific topic.