CVE-2019-16996: SQL Injection
Published Sep 30, 2019
·Updated
In Metinfo 7.0.0beta, a SQL Injection was discovered in app/system/product/admin/productadmin.class.php via the admin/?n=product&c=productadmin&a=dopara&apptype=shop id parameter.
Affected Software
1 affected component
Metinfo Metinfo=7.0.0-beta
Event History
Sep 30, 2019
CVE Published
via MITRE·12:44 PM
Data Sourced
via MITRE·12:44 PM
Description
Frequently Asked Questions
1
What is CVE-2019-16996?
CVE-2019-16996 is a SQL Injection vulnerability discovered in Metinfo 7.0.0beta.
2
How severe is CVE-2019-16996?
CVE-2019-16996 has a severity rating of 7.2 (High).
3
How can I fix the SQL Injection vulnerability in Metinfo 7.0.0beta?
To fix the vulnerability, update Metinfo to a version that is not affected by CVE-2019-16996 or apply the necessary patches provided by the vendor.
4
Is there any known exploit for CVE-2019-16996?
As of now, there is no known exploit publicly available for CVE-2019-16996.
5
Where can I find more information about CVE-2019-16996?
For more information about CVE-2019-16996, you can refer to the following link: https://github.com/XiaOkuoAi/XiaOkuoAi.github.io/issues/1