# CVE-2019-25694: Kados R10 GreenBee SQL injection in user2reset parameter

Source: https://junglewise.ai/threats/cve-2019-25694-kados-r10-greenbee-sql-injection-in-user2reset-parameter  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-05. Updated: 2026-07-25  
License: CC BY 4.0 with a link back

CVE-2019-25694 · Severity: high · CVSS 8.2 · Published 2026-04-05

Kados R10 GreenBee is a web-based project management tool used for Scrum and Agile workflows. A security vulnerability allows unauthenticated attackers to interfere with the application's database by sending specially crafted web requests. This could lead to the unauthorized exposure of sensitive project data or the modification of information within the system.

Technologies: [Kados R10 GreenBee](https://junglewise.ai/threats/technologies/kados-r10-greenbee). Vendors: [Kados](https://junglewise.ai/threats/vendors/kados).

## Quick answers

**Is CVE-2019-25694 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2019-25694 being exploited in the wild.

**How severe is CVE-2019-25694?** High severity, with a CVSS score of 8.2, published 5 April 2026.

**Which products and versions are affected?** Kados R10 GreenBee R10 GreenBee.

**Is there a fix for CVE-2019-25694?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2019-25694 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2019-25694?** Check whether you run Kados R10 GreenBee at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An SQL injection vulnerability exists in Kados R10 GreenBee due to improper neutralization of special elements in the 'user2reset' parameter within the password reset functionality. An unauthenticated remote attacker can exploit this by sending crafted GET requests containing malicious SQL payloads. Successful exploitation allows for blind SQL injection, enabling the attacker to extract sensitive information from the database or modify data. Other parameters such as 'menu_lev1', 'mng_profile_id', and 'id_to_modify' are also reportedly affected by similar injection flaws. While a newer version (R11-YellowCat) was released in late 2019, users should verify if these specific flaws are addressed or migrate to the latest supported version.

## Affected products

- Kados Kados R10 GreenBee R10 GreenBee

## Timeline

- 2019-03-07: disclosed: Exploit details published on Exploit-DB
- 2019-12-22: other: Release of R11-YellowCat version
- 2026-04-05: advisory: CVE-2019-25694 published to NVD

## References

- [https://sourceforge.net/projects/kados/](https://sourceforge.net/projects/kados/)
- [https://www.exploit-db.com/exploits/46505](https://www.exploit-db.com/exploits/46505)
- [https://www.kados.info/](https://www.kados.info/)
- [https://www.vulncheck.com/advisories/kados-r10-greenbee-sql-injection-via-user2reset](https://www.vulncheck.com/advisories/kados-r10-greenbee-sql-injection-via-user2reset)

## Related threats

- [Kados R10 GreenBee SQL injection in multiple parameters](https://junglewise.ai/threats/cve-2019-25704-kados-r10-greenbee-sql-injection-in-multiple-parameters)
- [Kados R10 GreenBee SQL injection in multiple parameters](https://junglewise.ai/threats/cve-2019-25702-kados-r10-greenbee-sql-injection-in-multiple-parameters)
- [Kados R10 GreenBee SQL injection in multiple parameters](https://junglewise.ai/threats/cve-2019-25700-kados-r10-greenbee-sql-injection-in-multiple-parameters)
- [Kados R10 GreenBee SQL injection in multiple parameters](https://junglewise.ai/threats/cve-2019-25698-kados-r10-greenbee-sql-injection-in-multiple-parameters)
- [Kados R10 GreenBee SQL injection in language_tag parameter](https://junglewise.ai/threats/cve-2019-25696-kados-r10-greenbee-sql-injection-in-language-tag-parameter)