CVE-2019-16996: Metinfo 7.0.0beta SQL Inject

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2019-16996
• https://www.cvedetails.com/cve/CVE-2019-16996/
• https://github.com/advisories/GHSA-vc72-33c9-j9j3
• https://www.clouddefense.ai/cve/2019/CVE-2019-16996
• https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-16996.yaml
• https://github.com/chaitin/xray/blob/master/pocs/metinfo-cve-2019-16996-sqli.yml
• https://vulnerability.circl.lu/vuln/gsd-2019-16996
• https://webtechsurvey.com/cve/CVE-2019-16996
• https://www.incibe.es/index.php/en/incibe-cert/early-warning/vulnerabilities/cve-2019-16996

Related Vulnerabilities

• PoCCVE-2026-18072: Advanced Responsive Video Embedder 10.8.7/10.8.8 - Hardcoded Backdoor Authentication Bypass
• PoCCVE-2026-27960: OpenCTI < 6.9.13 - Authentication Bypass via User Impersonation
• PoCCVE-2020-29134: TOTVS Fluig <= 1.7.0 - Arbitrary File Read
• PoCCVE-2025-51683: mJobTime <= 15.7.2 - Unauthenticated Blind SQL Injection to RCE
• PoCCVE-2025-57231: Docmost 0.2.1-0.21.0 - Arbitrary File Read
• PoCCVE-2026-0702: VidShop for WooCommerce <= 1.1.4 - SQL Injection
• PoCCVE-2026-0768: Langflow <=1.2.x - Unauthenticated Remote Code Execution via validate_code
• PoCCVE-2026-1281: Ivanti EPMM <=12.7.0.0 - Unauthenticated Code Injection
• PoCCVE-2026-21875: ClipBucket v5 <= 5.5.2 - Unauthenticated Blind SQL Injection
• PoCCVE-2026-23693: ElementsKit Lite <3.7.9 - Unauthenticated Mailchimp Proxy
• PoCCVE-2026-27454: Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization Bypass
• PoCCVE-2026-41679: Paperclip - Remote Code Execution
• PoCCVE-2026-42221: Nginx UI <= 2.3.7 - Unauthenticated Installer Exposure