high8.8Public exploit code
CVE-2019-16065
A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows an attacker to execute SQL commands to e…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Enigma NMS 65.0.0 - SQL Injection2019-09-09 · webapps · multiple
Impact
A remote SQL injection web vulnerability was discovered in the Enigma NMS 65.0.0 and prior web application that allows an attacker to execute SQL commands to expose and compromise the web server, expose database tables and values, and potentially execute system-based commands as the mysql user. This affects the search_pattern value of the manage_hosts_short.cgi script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netsas | Enigma Network Management Solution | through 65.0.0 |