Critical severity9.8NVD Advisory· Published Sep 28, 2018· Updated Jun 17, 2026

CVE-2018-16659

Description

An issue was discovered in Rausoft ID.prove 2.95. The login page allows SQL injection via Microsoft SQL Server stacked queries in the Username POST parameter. Hypothetically, an attacker can utilize master..xp_cmdshell for the further privilege elevation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Rausoft/ID.provellm-fuzzy
Range: = 2.95

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/45500/nvdExploitThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000