Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: kostasmitroglou Clear all filters
TI-2019-15494 CVE-2019-25441 · GHSA-r872-6r9v-fwgg

thesystem 1.0 Command Injection via run_command endpoint

Priority HIGH 81

thesystem 1.0 contains a command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the run_command endpoint.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.09316 Published 2026-02-20 No fix listed CWE-78
TI-2019-15401 CVE-2019-25347 · GHSA-79w3-8jvg-fr55

thesystem App 1.0 - 'username' SQL Injection

Priority MEDIUM 64

thesystem App 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the username parameter.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00521 Published 2026-02-12 No fix listed CWE-89
TI-2019-15400 CVE-2019-25346 · GHSA-qjg6-3whf-x8q9

thesystem 1.0 - 'server_name' SQL Injection

Priority MEDIUM 64

TheSystem 1.0 contains a SQL injection vulnerability that allows attackers to bypass authentication by manipulating the 'server_name' parameter.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00521 Published 2026-02-12 No fix listed CWE-89
TI-2019-15365 CVE-2019-25311 · GHSA-9qqr-wpm4-gqc3

thesystem Persistent XSS

Priority MEDIUM 56

thesystem version 1.0 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts through multiple server data input fields.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00249 Published 2026-02-11 No fix listed CWE-79