CVE-2019-25704 in R10 GreenBee
Summary
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the filter_user_mail parameter. Attackers can send crafted requests with malicious SQL statements to extract sensitive database information or modify data.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Responsible
VulnCheck
Reservation
04/05/2026
Disclosure
04/06/2026
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 355472 | Kados R10 GreenBee Request sql injection | 89 | Proof-of-Concept | Not defined | CVE-2019-25704 |