Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: Kados Clear all filters
TI-2018-15620 CVE-2018-25395 · GHSA-3h65-qwh5-2r5j

Kados R10 GreenBee SQL Injection via update_feature.php

Priority HIGH 77

Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the feature_id parameter of boards_buttons/update_feat…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00334 Published 2026-05-29 No fix listed CWE-89
TI-2018-15619 CVE-2018-25394 · GHSA-7chv-5rw8-8qhx

Kados R10 GreenBee SQL Injection via update_release.php

Priority HIGH 77

Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the release_id parameter of boards_buttons/update_rele…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00334 Published 2026-05-29 No fix listed CWE-89
TI-2019-15756 CVE-2019-25704 · GHSA-9hpq-rwf7-p973

Kados R10 GreenBee SQL Injection via filter_user_mail

Priority HIGH 77

Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the filter_user_mail parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00317 Published 2026-04-05 No fix listed CWE-89
TI-2019-15754 CVE-2019-25702 · GHSA-m7r2-5hwh-hm93

Kados R10 GreenBee SQL Injection via id_project Parameter

Priority HIGH 77

Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_project parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00317 Published 2026-04-05 No fix listed CWE-89
TI-2019-15752 CVE-2019-25700 · GHSA-8jm8-3wrj-jr8j

Kados R10 GreenBee SQL Injection via sort_direction Parameter

Priority HIGH 77

Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the sort_direction parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00317 Published 2026-04-05 No fix listed CWE-89
TI-2019-15750 CVE-2019-25698 · GHSA-qhpc-759w-4g4q

Kados R10 GreenBee SQL Injection via id_to_delete Parameter

Priority HIGH 77

Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_to_delete parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00317 Published 2026-04-05 No fix listed CWE-89
TI-2019-15748 CVE-2019-25696 · GHSA-567j-3p8m-25r7

Kados R10 GreenBee SQL Injection via language_tag Parameter

Priority HIGH 77

Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the language_tag parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00317 Published 2026-04-05 No fix listed CWE-89
TI-2019-15746 CVE-2019-25694 · GHSA-x43m-phhc-g74h

Kados R10 GreenBee SQL Injection via user2reset

Priority HIGH 77

Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user2reset parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00405 Published 2026-04-05 No fix listed CWE-89
TI-2019-15744 CVE-2019-25692 · GHSA-w44f-57qx-7qf7

Kados R10 GreenBee SQL Injection via id_to_modify Parameter

Priority HIGH 77

Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'id_to_modify' parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00317 Published 2026-04-05 No fix listed CWE-89
TI-2019-15742 CVE-2019-25690 · GHSA-86vw-26fw-5whc

Kados R10 GreenBee SQL Injection via mng_profile_id

Priority HIGH 77

Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mng_profile_id parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00317 Published 2026-04-05 No fix listed CWE-89
TI-2019-15740 CVE-2019-25688 · GHSA-4qhq-qj7h-c7fx

Kados R10 GreenBee SQL Injection via menu_lev1 Parameter

Priority HIGH 77

Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the menu_lev1 parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00344 Published 2026-04-05 No fix listed CWE-89