cveboard RSS feed

CVE-2016-20096

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2016
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Linknat VOS3000/VOS2009 2.1.2.0 SQL Injection via login.jsp

Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by manipulating the name parameter in a POST request to the login endpoint. Attackers can inject malicious SQL through the login form and retrieve injected query results from a subsequent session request, enabling extraction of plaintext credentials and other database content with DBA-level privileges.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Linknat VOS3000

Vendor
Kunshi Network Technology Co., Ltd.
Product
Linknat VOS3000
Platforms
Unknown
Default status
affected
Linknat VOS3000 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
2.1.1.5affectedcustomUnavailableUnavailableNone listed
2.1.1.8affectedcustomUnavailableUnavailableNone listed
2.1.2.0affectedcustomUnavailableUnavailableNone listed

Linknat VOS2009

Vendor
Kunshi Network Technology Co., Ltd.
Product
Linknat VOS2009
Platforms
Unknown
Default status
affected
Linknat VOS2009 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
2.1.1.5affectedcustomUnavailableUnavailableNone listed
2.1.1.8affectedcustomUnavailableUnavailableNone listed
2.1.2.0affectedcustomUnavailableUnavailableNone listed