CVE-2019-19245 - NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginForm[username] field when double quotes are used

Back Back to CVE browser

CRITICAL

NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginForm[username] field when double quotes are used

Published Dec 2, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 7.94%

Description

NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginForm[username] field when double quotes are used.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

http://hyp3rlinx.altervista.org
x_refsource_MISCExploitThird Party Advisory
http://seclists.org/fulldisclosure/2025/Feb/0
https://packetstormsecurity.com/files/155505/Xinet-Elegant-6-Asset-Library-Web-Interface-6.1.655-SQL-Injection.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://hyp3rlinx.altervista.org		x_refsource_MISCExploitThird Party Advisory
http://seclists.org/fulldisclosure/2025/Feb/0
https://packetstormsecurity.com/files/155505/Xinet-Elegant-6-Asset-Library-Web-Interface-6.1.655-SQL-Injection.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 2, 2019

Updated Feb 2, 2025

Reserved Nov 25, 2019

Link CVE-2019-19245

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-19245

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-19245