High severity7.5NVD Advisory· Published Dec 2, 2019· Updated Jun 17, 2026

CVE-2019-19016

Description

An issue was discovered in TitanHQ WebTitan before 5.18. Some functions, such as /history-x.php, of the administration interface are vulnerable to SQL Injection through the results parameter. This could be used by an attacker to extract sensitive information from the appliance database.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TitanHQ/WebTitan2 versions
cpe:2.3:a:titanhq:webtitan:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:titanhq:webtitan:*:*:*:*:*:*:*:*range: <5.18
- (no CPE)range: <5.18
TitanHQ/WebTitandescription

Patches

Vulnerability mechanics

References

write-up.github.io/webtitan/nvdExploitThird Party Advisory
www.webtitan.com/resources/product-updates/nvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000