CVE-2019-25347

Name of the Vulnerable Software and Affected Versions thesystem App version 1.0

Description The software contains a SQL injection flaw that enables attackers to circumvent authentication. By altering the username parameter, attackers can inject malicious SQL code, such as ' or '1=1', into the username field to obtain unauthorized access to user accounts.

Recommendations Apply input validation and sanitization to the username parameter to prevent the injection of malicious SQL code.