Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/31 12:00 a.m.•5 views

CVE-2019-10123: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Advanced InfoData Systems AIS ESEL-Server 67 which is the backend for the AIS logistics mobile app allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database. The default user for the database is the 'sa' user...

9.8CVSS6.5AI score0.6585EPSS
SaveExploits5References2
Rows per page
Query Builder