← Vulnerability feed

Vulnerability record · CVE-2019-25704 · published 5 April 2026

CVE-2019-25704: Marmotech kados sql injection vulnerability

Marmotech · Kados

Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the filter_user_mail parameter. Attackers can send crafted requests with malicious SQL statements to extract sensitive database information or modify data.

8.8 CVSS 4.0 High EPSS 0.31% · top 78.5% CWE-89 · SQL injection
8.8CVSS 4.0 base score
0.31%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References, 1 tagged exploit
24 Jul 2026Last modified by NVD

Description

Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the filter_user_mail parameter. Attackers can send crafted requests with malicious SQL statements to extract sensitive database information or modify data.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://sourceforge.net/projects/kados/ Product
https://www.exploit-db.com/exploits/46505 ExploitVDB Entry
https://www.kados.info/ Product
https://www.vulncheck.com/advisories/kados-r10-greenbee-sql-injection-via-filter-user-mail Third Party Advisory

Track CVE-2019-25704 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2019-25694Marmotech kados sql injection vulnerabilityKados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code…EPSS 0.40%8.8CVE-2019-25696Marmotech kados sql injection vulnerabilityKados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the lan…EPSS 0.31%8.8CVE-2019-25698Marmotech kados sql injection vulnerabilityKados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_…EPSS 0.31%8.8CVE-2019-25700Marmotech kados sql injection vulnerabilityKados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the sor…EPSS 0.31%8.8CVE-2019-25702Marmotech kados sql injection vulnerabilityKados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_…EPSS 0.31%8.8CVE-2019-25688Marmotech kados sql injection vulnerabilityKados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code…EPSS 0.34%8.8CVE-2019-25690Marmotech kados sql injection vulnerabilityKados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mng…EPSS 0.31%8.8CVE-2019-25692Marmotech kados sql injection vulnerabilityKados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'id…EPSS 0.31%

Source: NIST National Vulnerability Database (record CVE-2019-25704), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.