Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th…

CVE-2019-25688 affects Kados R10 GreenBee with an SQL injection vulnerability in the menu_lev1 parameter. The vulnerability allows unauthenticated attackers to manipulate database queries by injecting malicious SQL code. Attackers can craft requests to extract sensitive database information or modify database contents. The vulnerability enables unauthorized access to the database without requiring authentication. This represents a critical security flaw that could lead to data compromise and unauthorized system access.