CVE-2019-25432: Part-DB 0.4 Authentication Bypass via login.php
Part-DB 0.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to login by injecting SQL syntax into authentication parameters. Attackers can submit a single quote followed by 'or' in the login form to bypass credential validation and gain unauthorized access to the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25432?
CVE-2019-25432 is classified as a high severity vulnerability due to the potential for unauthorized access.
How do I fix CVE-2019-25432?
To fix CVE-2019-25432, sanitize user input to prevent SQL injection and implement proper authentication checks.
What can attackers do with CVE-2019-25432?
Attackers can exploit CVE-2019-25432 to gain unauthorized access to the system by bypassing authentication.
Which versions of Part-DB are affected by CVE-2019-25432?
CVE-2019-25432 affects Part-DB version 0.4.
How is CVE-2019-25432 exploited?
CVE-2019-25432 is exploited by injecting SQL syntax into the login form to bypass authentication controls.