CVE-2019-19016: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in TitanHQ WebTitan before 5.18. Some functions, such as /history-x.php, of the administration interface are vulnerable to SQL Injection through the results parameter. This could be used by an attacker to extract sensitive information from the appliance database...

PT-2019-15757

Name of the Vulnerable Software and Affected Versions TitanHQ WebTitan versions prior to 5.18 Description An issue was discovered in the administration interface of the software, where some functions, such as the "history-x.php" endpoint, are susceptible to SQL Injection through the results...