Is CVE-2019-25688 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2019-25688 being exploited in the wild.

How severe is CVE-2019-25688?

High severity, with a CVSS score of 8.2, published 5 April 2026.

Is there a fix for CVE-2019-25688?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2019-25688 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2019-25688?

Check whether you run Kados GreenBee at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2019-25688: Kados GreenBee SQL injection in menu_lev1 parameter

CVE-2019-25688 · Severity: high · CVSS 8.2 · Published 2026-04-05

Kados GreenBee, a web-based project management tool for Scrum and Agile teams, contains a security flaw that allows unauthorized users to interfere with its database. By sending specially crafted web requests, an attacker can bypass security controls to view sensitive project data or modify database records. This could lead to the exposure of confidential business information or the disruption of project management operations.

Vendors: Kados.

Quick answers

Is CVE-2019-25688 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2019-25688 being exploited in the wild.
How severe is CVE-2019-25688?: High severity, with a CVSS score of 8.2, published 5 April 2026.
Which products and versions are affected?: Kados GreenBee R10 GreenBee.
Is there a fix for CVE-2019-25688?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2019-25688 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2019-25688?: Check whether you run Kados GreenBee at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An SQL injection vulnerability exists in Kados R10 GreenBee due to improper neutralization of special elements in the 'menu_lev1' parameter across multiple PHP files (e.g., projects.php, users.php, profiles.php). An unauthenticated remote attacker can exploit this by sending crafted GET requests containing malicious SQL payloads. Successful exploitation allows the attacker to extract sensitive information from the database or modify its contents. Additional vulnerable parameters identified in the same version include 'mng_profile_id', 'id_to_modify', 'user2reset', and 'language_tag'. While a newer version (R11-YellowCat) was released in late 2019, users should verify if these specific flaws are addressed or migrate to the latest supported version.

Affected products

Kados Kados GreenBee R10 GreenBee

Timeline

2019-03-07: disclosed: Initial exploit code published on Exploit-DB
2019-12-22: other: Newer version R11-YellowCat released
2026-04-05: advisory: CVE-2019-25688 published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.