CVE-2019-16996: Metinfo 7.0.0beta SQL Inject

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2019-16996
• https://www.cvedetails.com/cve/CVE-2019-16996/
• https://github.com/advisories/GHSA-vc72-33c9-j9j3
• https://www.clouddefense.ai/cve/2019/CVE-2019-16996
• https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16996.yaml
• https://github.com/chaitin/xray/blob/master/pocs/metinfo-cve-2019-16996-sqli.yml
• https://vulnerability.circl.lu/vuln/gsd-2019-16996
• https://webtechsurvey.com/cve/CVE-2019-16996
• https://www.incibe.es/index.php/en/incibe-cert/early-warning/vulnerabilities/cve-2019-16996

Related Vulnerabilities

• PoCCVE-2022-27925: Zimbra Collaboration Suite 8.8.15/9.0 - Zip Path Traversal
• PoCCVE-2026-29058: WWBN AVideo Encoder < 7.0 - Unauthenticated OS Command Injection
• Apache Kafka UI /smartfilters/testexecutions 代码执行漏洞（CVE-2026-78166）
• Netbox-Docker /api/status/ 默认口令漏洞（CVE-2023-27573）
• PoCCVE-2024-57728: SimpleHelp <= 5.5.7 - Arbitrary File Upload
• PoCCVE-2025-11452: Asgaros Forum < 3.2.0 - SQL Injection
• PoCCVE-2025-34033: Blue Angel Software Suite (5V Technologies) - OS Command Injection
• PoCCVE-2025-68273: Signal K Server <= 2.18.0 - Information Disclosure
• PoCCVE-2026-12227: Visual Composer <= 45.16.0 - Unauthenticated LFI
• PoCCVE-2026-25703: NeuVector - Information Disclosure
• PoCCVE-2026-61560: GitLab MCP Server < 2.1.27 - Unauthenticated SSE Transport Access
• PoCCVE-2026-87902: WordPress Core - PHP Template Path Traversal
• 浪潮GS7前台SQL注入漏洞