CVE-2019-10123 in ESEL-Server 67

सारांश

द्वारा VulDB • 02/06/2026

SQL Injection in Advanced InfoData Systems (AIS) ESEL-Server 67 (jo AIS logistics mobile app ka backend hai) ek anonymous attacker ko MSSQL database ke user ke context mein arbitrary code execute karne ki anumati deta hai. Database ke liye default user 'sa' user hai.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• आरक्षित करना: 27/03/2019
• संयम: स्वीकृत
• प्रविष्टि: VDB-135760
• CPE: तैयार
• CWE: CWE-89 (पुष्टि की गई)
• शोषण: डाउनलोड
• CVSS: 9.8 (NVD)
• EPSS: 0.65850
• KEV: नहीं
• गतिविधियाँ: बहुत कम

स्रोत

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-10123
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-10123
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-10123/