napc records
1 published records for vendor napc.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
1 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
41Plan | CVE-2019-19245Proof of concept | NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginForm[username] field when donapc · xinet elegant 6 asset library · CWE-89 | Critical9.8 | — | 7.9% | Dec 2, 2019 |
- CVE-2019-1924541Plan
NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginForm[username] field when do
CriticalCVSS 9.8Proof of conceptEPSS 7%napc · xinet elegant 6 asset libraryDec 2, 2019