Lucene search
CVE-2019-13191
SQL injection vuln in IntraMaps MapControl 8, allows arbitrary SQL commands execution via /ApplicationEngine/Search/Refine/Set page
Show more
| Reporter | Title | Published | Views | Family All 3 |
|---|---|---|---|---|
 | Sql injection | 5 Sep 201918:15 | – | prion |
 | CVE-2019-13191 | 5 Sep 201917:26 | – | cvelist |
 | CVE-2019-13191 | 5 Sep 201918:15 | – | nvd |
Node
| Source | Link |
|---|---|
| blog | www.blog.contentsecurity.com.au/mapcontrol-sql-injection |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| query param | /ApplicationEngine/Search/Refine/Set | A SQL injection vulnerability allows execution of arbitrary SQL commands. | CWE-89 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo05 Sep 2019 18:15Current
8High risk
Vulners AI Score8
CVSS25
CVSS37.5
EPSS0.00475