CVE-2019-13191

A SQL injection vulnerability in IntraMaps MapControl 8 allows attackers to execute arbitrary SQL commands via the /ApplicationEngine/Search/Refine/Set page.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2019-09-05

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Intramaps (Mapsolutions)

References

• https://blog.contentsecurity.com.au/mapcontrol-sql-injection