CVE-2016-20096
Linknat VOS3000/VOS2009 2.1.2.0 SQL Injection via login.jsp
- State
- Published
- Severity
- 9.3 Critical
- Published
- Jul 21, 2026
- Updated
- Sep 24, 2026
- Reserved
- Jul 21, 2026
Description
Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by manipulating the name parameter in a POST request to the login endpoint. Attackers can inject malicious SQL through the login form and retrieve injected query results from a subsequent session request, enabling extraction of plaintext credentials and other database content with DBA-level privileges.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.3 Critical | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Affected Products
| Product | Versions |
|---|---|
Linknat VOS3000Kunshi Network Technology Co., Ltd. |
|
Linknat VOS2009Kunshi Network Technology Co., Ltd. |
|
References
- Archived WooYun Disclosuretechnical-descriptionexploit
- Packet Storm Entry (137159)exploit
- Vendor Homepageproduct
- https://www.vulncheck.com/advisories/linknat-vos3000-vos2009-sql-injection-via-login-jspthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.