What’s Vulnerable › Vulnerabilities

CVE-2019-1010248

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-07-18 · updated 2026-06-17
• Weakness: CWE-89

Description

Synetics GmbH I-doit 1.12 and earlier is affected by: SQL Injection. The impact is: Unauthenticated mysql database access. The component is: Web login form. The attack vector is: An attacker can exploit the vulnerability by sending a malicious HTTP POST request. The fixed version is: 1.12.1.

Affected products

• I-Doit doit CMDB: through 1.12

References

• https://sourceforge.net/projects/i-doit/files/i-doit/1.12.1/CHANGELOG/download
• https://sourceforge.net/projects/i-doit/files/i-doit/1.12.1/CHANGELOG/download

Get alerted when CVE-2019-1010248 or the next vulnerability affects your stack