CVE-2019-25432: Part-DB

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Part-DB 0.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to login by injecting SQL syntax into authentication parameters. Attackers can submit a single quote followed by 'or' in the login form to bypass credential validation and gain unauthorized access to the application.

Affected products

• Part-DB Part-DB: version 0.4 only

Published 2026-02-20. Last modified 2026-06-17.