Linknat VOS3000/VOS2009 2.1.2.0 SQL Injection via login.jsp
Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by manipulating the name parameter in a POST request to the login endpoint. Attackers can inject malicious SQL through the login form and retrieve injected query results from a subsequent session request, enabling extraction of plaintext credentials and other database content with DBA-level privileges.
CVE-2016-20096
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2016-20096
Linknat VOS3000
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linknat VOS2009
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Kunshi Network Technology Co., Ltd.",
"product": "Linknat VOS3000",
"versions": [
{
"status": "affected",
"version": "2.1.1.5",
"versionType": "custom"
},
{
"status": "affected",
"version": "2.1.1.8",
"versionType": "custom"
},
{
"status": "affected",
"version": "2.1.2.0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
},
{
"vendor": "Kunshi Network Technology Co., Ltd.",
"product": "Linknat VOS2009",
"versions": [
{
"status": "affected",
"version": "2.1.1.5",
"versionType": "custom"
},
{
"status": "affected",
"version": "2.1.1.8",
"versionType": "custom"
},
{
"status": "affected",
"version": "2.1.2.0",
"versionType": "custom"
}
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2016-20096
Source reference:
/cveMetadata/cveId
Publisher severity
critical
Source reference: /containers/cna/metrics
- Event
- #847 · Revision 1
- Added to Heist Feed
- Publisher date