Lucene search
+L

11 matches found

RedhatCVE
RedhatCVE
•added 2026/01/07 9:31 a.m.•15 views

CVE-2019-16999

CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...

9.8CVSS8.1AI score0.01482EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2019-7474

Malware in sbrugna...

9.8CVSS8.1AI score0.01482EPSS
SaveExploits1References2
CNVD
CNVD
•added 2019/11/20 12:00 a.m.•12 views

CloudBoot SQL Injection Vulnerability

iDCOS CloudBoot is an open source X86 server configuration and installation tool from China's CloudBoot Technology iDCOS. CloudBoot suffers from a SQL injection vulnerability. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An...

9.8CVSS8.2AI score0.01482EPSS
SaveExploits1References1
OSV
OSV
•added 2019/09/30 1:15 p.m.•15 views

CVE-2019-16999

CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...

9.8CVSS7.4AI score0.01482EPSS
SaveExploits1References1
NVD
NVD
•added 2019/09/30 1:15 p.m.•31 views

CVE-2019-16999

CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...

9.8CVSS9.7AI score0.01482EPSS
SaveExploits1References1
Prion
Prion
•added 2019/09/30 1:15 p.m.•22 views

Sql injection

CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...

7.5CVSS9.5AI score0.01482EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2019/09/30 12:35 p.m.•27 views

CVE-2019-16999

CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...

9.7AI score0.01482EPSS
SaveExploits1References1
CVE
CVE
•added 2019/09/30 12:35 p.m.•100 views

CVE-2019-16999

CloudBoot vulnerable to SQL Injection through a crafted Status field in JSON data sent to api/osinstall/v1/device/getNumByStatus (CVE-2019-16999). Multiple sources (NVD, Red Hat, CNVD, CNVD/CVELIST entries) describe the issue as a lack of validation of externally entered SQL statements in CloudBo...

9.8CVSS9.5AI score0.01482EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/30 12:00 a.m.•7 views

CVE-2019-16999: Improper Neutralization of Special Elements used in an SQL Command

CloudBoot through 2019-03-08 allows SQL Injection via a crafted Status field in JSON data to the api/osinstall/v1/device/getNumByStatus URI...

9.8CVSS8.2AI score0.01482EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/09/30 12:00 a.m.•5 views

PT-2019-14918

Name of the Vulnerable Software and Affected Versions CloudBoot versions prior to 2019-03-08 Description The issue allows for SQL Injection via a crafted Status field in JSON data to the "api/osinstall/v1/device/getNumByStatus" URI. Recommendations For CloudBoot versions prior to 2019-03-08,...

9.8CVSS0.01482EPSS
SaveExploits1References3
CNVD
CNVD
•added 2019/09/06 12:00 a.m.•8 views

Cloudboot Cloudboot Installation Platform suffers from SQL Injection Vulnerability

CloudBoot is the most widely used and easy-to-use fully automated installation platform in China, which can realize fully automated installation from hardware to operating system after the machine is racked, and automated rapid installation and configuration of large-scale servers. Cloudboot...

7.9AI score
SaveExploits0
Rows per page
Query Builder