CVE-2019-25432 - Part-DB 0.4 Authentication Bypass via login.php

Back Back to CVE browser

HIGH

Part-DB 0.4 Authentication Bypass via login.php

Published Feb 20, 2026

8.8

HIGH

CVSS 4.0

EPSS 0.36%

Description

Part-DB 0.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to login by injecting SQL syntax into authentication parameters. Attackers can submit a single quote followed by 'or' in the login form to bypass credential validation and gain unauthorized access to the application.

Affected products

Vendor Part-DB Product Part-DB Default
n/a
- Version
  0.4
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Part-DB

n/a

Version	Status	Constraints
0.4	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://github.com/Part-DB/Part-DB/
product
https://www.exploit-db.com/exploits/47547
exploit
https://www.vulncheck.com/advisories/part-db-authentication-bypass-via-loginphp
third-party-advisory

Link	Providers	Tags
https://github.com/Part-DB/Part-DB/		product
https://www.exploit-db.com/exploits/47547		exploit
https://www.vulncheck.com/advisories/part-db-authentication-bypass-via-loginphp		third-party-advisory