1. Home
  2. CVE Database
  3. CVE-2019-15016
HIGH · 8.8

CVE-2019-15016

An SQL injection vulnerability exists in the management interface of Zingbox Inspector versions 1.288 and earlier, that allows for unsanitized data provided by an authenticated user to be passed from ...

Vulnerability Description

An SQL injection vulnerability exists in the management interface of Zingbox Inspector versions 1.288 and earlier, that allows for unsanitized data provided by an authenticated user to be passed from the web UI into the database.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
ZingboxInspector<= 1.288

Related Weaknesses (CWE)

CWE-89

References

FAQ

What is CVE-2019-15016?

CVE-2019-15016 is a vulnerability with a CVSS score of 8.8 (HIGH). An SQL injection vulnerability exists in the management interface of Zingbox Inspector versions 1.288 and earlier, that allows for unsanitized data provided by an authenticated user to be passed from ...

How severe is CVE-2019-15016?

CVE-2019-15016 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-15016?

Check the references section above for vendor advisories and patch information. Affected products include: Zingbox Inspector.