<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: kados</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2019-25704: Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database querie</title><link>https://patchthecve.com/cve/CVE-2019-25704.html</link><guid>https://patchthecve.com/cve/CVE-2019-25704.html</guid><pubDate>Fri, 24 Jul 2026 22:10:00 +0000</pubDate><description>HIGH 8.2: Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the filter_user_mail parameter. Attackers can send crafted requests with malicious SQL statements to extract sensitive database information or modify data.</description></item><item><title>CVE-2019-25702: Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database querie</title><link>https://patchthecve.com/cve/CVE-2019-25702.html</link><guid>https://patchthecve.com/cve/CVE-2019-25702.html</guid><pubDate>Fri, 24 Jul 2026 22:10:00 +0000</pubDate><description>HIGH 8.2: Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_project parameter. Attackers can send crafted requests with malicious SQL statements in the id_project parameter to extract sensitive database informat</description></item><item><title>CVE-2019-25700: Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database querie</title><link>https://patchthecve.com/cve/CVE-2019-25700.html</link><guid>https://patchthecve.com/cve/CVE-2019-25700.html</guid><pubDate>Fri, 24 Jul 2026 22:10:00 +0000</pubDate><description>HIGH 8.2: Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the sort_direction parameter. Attackers can submit malicious SQL statements in the sort_direction parameter to extract sensitive database information or modif</description></item><item><title>CVE-2019-25698: Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database querie</title><link>https://patchthecve.com/cve/CVE-2019-25698.html</link><guid>https://patchthecve.com/cve/CVE-2019-25698.html</guid><pubDate>Fri, 24 Jul 2026 22:10:00 +0000</pubDate><description>HIGH 8.2: Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_to_delete parameter. Attackers can send crafted requests with malicious SQL statements in the id_to_delete field to extract or modify sensitive databas</description></item><item><title>CVE-2019-25696: Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database querie</title><link>https://patchthecve.com/cve/CVE-2019-25696.html</link><guid>https://patchthecve.com/cve/CVE-2019-25696.html</guid><pubDate>Fri, 24 Jul 2026 22:10:00 +0000</pubDate><description>HIGH 8.2: Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the language_tag parameter. Attackers can submit malicious SQL statements in the language_tag parameter to extract sensitive database information or modify da</description></item><item><title>CVE-2019-25694: Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate</title><link>https://patchthecve.com/cve/CVE-2019-25694.html</link><guid>https://patchthecve.com/cve/CVE-2019-25694.html</guid><pubDate>Fri, 24 Jul 2026 22:10:00 +0000</pubDate><description>HIGH 8.2: Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user2reset parameter. Attackers can send crafted requests with malicious SQL payloads to extract sensitive database information or modify </description></item><item><title>CVE-2019-25692: Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database querie</title><link>https://patchthecve.com/cve/CVE-2019-25692.html</link><guid>https://patchthecve.com/cve/CVE-2019-25692.html</guid><pubDate>Fri, 24 Jul 2026 22:10:00 +0000</pubDate><description>HIGH 8.2: Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the &#x27;id_to_modify&#x27; parameter. Attackers can send crafted requests with malicious SQL statements in the id_to_modify field to extract sensitive database inform</description></item><item><title>CVE-2019-25690: Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database querie</title><link>https://patchthecve.com/cve/CVE-2019-25690.html</link><guid>https://patchthecve.com/cve/CVE-2019-25690.html</guid><pubDate>Fri, 24 Jul 2026 22:10:00 +0000</pubDate><description>HIGH 8.2: Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mng_profile_id parameter. Attackers can send crafted requests with malicious SQL payloads in the mng_profile_id parameter to extract sensitive database in</description></item><item><title>CVE-2019-25688: Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate</title><link>https://patchthecve.com/cve/CVE-2019-25688.html</link><guid>https://patchthecve.com/cve/CVE-2019-25688.html</guid><pubDate>Fri, 24 Jul 2026 22:10:00 +0000</pubDate><description>HIGH 8.2: Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the menu_lev1 parameter. Attackers can send crafted requests with malicious SQL payloads in the menu_lev1 parameter to extract sensitive datab</description></item></channel></rss>