← Vulnerability feed

Vulnerability record · CVE-2019-25698 · published 5 April 2026

CVE-2019-25698: Marmotech kados sql injection vulnerability

Marmotech · Kados

Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_to_delete parameter. Attackers can send crafted requests with malicious SQL statements in the id_to_delete field to extract or modify sensitive database information.

8.8 CVSS 4.0 High EPSS 0.31% · top 78.5% CWE-89 · SQL injection
8.8CVSS 4.0 base score
0.31%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 1 tagged exploit
24 Jul 2026Last modified by NVD

Description

Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_to_delete parameter. Attackers can send crafted requests with malicious SQL statements in the id_to_delete field to extract or modify sensitive database information.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://sourceforge.net/projects/kados/ Product
https://www.exploit-db.com/exploits/46505 ExploitVDB Entry
https://www.kados.info/ Product
https://www.vulncheck.com/advisories/kados-r10-greenbee-sql-injection-via-id-to-delete-parameter Third Party Advisory

Track CVE-2019-25698 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2019-25694Marmotech kados sql injection vulnerabilityKados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code…EPSS 0.40%8.8CVE-2019-25696Marmotech kados sql injection vulnerabilityKados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the lan…EPSS 0.31%8.8CVE-2019-25700Marmotech kados sql injection vulnerabilityKados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the sor…EPSS 0.31%8.8CVE-2019-25702Marmotech kados sql injection vulnerabilityKados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_…EPSS 0.31%8.8CVE-2019-25704Marmotech kados sql injection vulnerabilityKados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the fil…EPSS 0.31%8.8CVE-2019-25688Marmotech kados sql injection vulnerabilityKados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code…EPSS 0.34%8.8CVE-2019-25690Marmotech kados sql injection vulnerabilityKados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mng…EPSS 0.31%8.8CVE-2019-25692Marmotech kados sql injection vulnerabilityKados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'id…EPSS 0.31%

Source: NIST National Vulnerability Database (record CVE-2019-25698), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.