CVE-2019-19016

Summary

An issue was discovered in TitanHQ WebTitan before 5.18. Some functions, such as /history-x.php, of the administration interface are vulnerable to SQL Injection through the results parameter. This could be used by an attacker to extract sensitive information from the appliance database.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://write-up.github.io/webtitan/
• https://www.webtitan.com/resources/product-updates/

References

• https://write-up.github.io/webtitan/
• https://www.webtitan.com/resources/product-updates/

• ←Previous
• Next→