CVE-2019-6295: SQL Injection
Published Jan 15, 2019
·Updated
Cleanto 5.0 has SQL Injection via the assets/lib/servicemethodajax.php serviceid parameter.
Affected Software
1 affected component
Skymoonlabs Cleanto=5.0
Event History
Jan 15, 2019
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-6295?
CVE-2019-6295 is classified as a medium severity vulnerability due to the potential for SQL injection attacks.
2
How do I fix CVE-2019-6295?
To fix CVE-2019-6295, you should validate and sanitize user inputs for the service_id parameter in the affected PHP file.
3
What software is affected by CVE-2019-6295?
CVE-2019-6295 affects Cleanto version 5.0.
4
What type of vulnerability is CVE-2019-6295?
CVE-2019-6295 is an SQL Injection vulnerability.
5
Can CVE-2019-6295 lead to data compromise?
Yes, CVE-2019-6295 can allow an attacker to execute arbitrary SQL queries, potentially compromising database data.