What is CVE-2019-25438?

CVE-2019-25438 is a high-severity vulnerability in Agilebio Labcollector, classified under SQL Injection. CVSS score: 7.5/10. Published 2026-02-20.

How severe is CVE-2019-25438?

High severity. CVSS v3 base score is 7.5 out of 10.

SQL Injection in Agilebio Labcollector

CVE-2019-25438

LabCollector 5.423 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through POST parameters. Attackers can submit crafted SQL payloads in the login parameter of login.php or the user_name parameter of retrieve_password.php to extract sensitive database information without authentication.

Vulnerability class: SQL Injection

EPSS: 0.005 (38.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Agilebio Labcollector — versions 5.423
Labcollector — versions 5.423

Weakness classification (CWE)

CWE-89 — SQL Injection

References

disclosure@vulncheck.com (Exploit, VDB Entry, exploit)
disclosure@vulncheck.com (Product, product)
disclosure@vulncheck.com (Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2019-25438?: CVE-2019-25438 is a high-severity vulnerability in Agilebio Labcollector, classified under SQL Injection. CVSS score: 7.5/10. Published 2026-02-20.
How severe is CVE-2019-25438?: High severity. CVSS v3 base score is 7.5 out of 10.