CVE-2019-10123

SQL Injection in Advanced InfoData Systems AIS ESEL-Server 67 which is the backend for the AIS logistics mobile app allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database. The default user for the database is the 'sa' user...

CVE-2019-10123

CVE-2019-10123 affects AIS AIS logistics ESEL-Server 67 (backend for the AIS mobile app). The issue is an SQL Injection in the ESEL-Server that allows an anonymous attacker to execute arbitrary code with the MSSQL sa context, i.e., a remote RCE over the network. The server typically exposes MSSQL...

CVE-2019-10123

creationtimestamp| type| source ---|---|--- 2019-04-29 19:13:43+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/aiseselserverrce.rb 2019-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46782 2025-02-06 03:13:43+00:00| seen...