CVE-2019-1000023

OPT/NET BV OPTOSS Next Gen Network Management System (NG-NetMS) version v3.6-2 and earlier versions contains a SQL Injection vulnerability in Identified vulnerable parameters: id, id_access_type and id_attr_access that can result in a malicious attacker can include own SQL commands which database will execute. This attack appears to be exploitable via network connectivity.

• CWE-89

• https://inf0seq.github.io/cve/2019/01/20/SQL-Injection-in-OPTOSS-Next-Gen-Network-Management-System-%28NG-NetMS%29.html
• https://sourceforge.net/projects/ngnms/Product, Third Party Advisory
• https://www.owasp.org/index.php/SQL_InjectionThird Party Advisory
• https://inf0seq.github.io/cve/2019/01/20/SQL-Injection-in-OPTOSS-Next-Gen-Network-Management-System-%28NG-NetMS%29.html
• https://sourceforge.net/projects/ngnms/Product, Third Party Advisory
• https://www.owasp.org/index.php/SQL_InjectionThird Party Advisory

Published

Feb 4, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1000017Chamilo Chamilo-lms version 1.11.8 and earlier contains an I…
• CVE-2019-1000018rssh version 2.3.4 contains a CWE-77: Improper Neutralizatio…7.8
• CVE-2019-1000019libarchive version commit bf9aec176c6748f0ee7a678c5f9f9555b9…6.5
• CVE-2019-1000020libarchive version commit 5a98dcf8a86364b3c2c469c85b93647dfb…6.5
• CVE-2019-1000021slixmpp version before commit 7cd73b594e8122dddf847953fcfc85…
• CVE-2019-1000022Taoensso Sente version Prior to version 1.14.0 contains a Cr…
• CVE-2019-1000024OPT/NET BV NG-NetMS version v3.6-2 and earlier versions cont…
• CVE-2019-1000030Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2019-1000031A disk space or quota exhaustion issue exists in article2pdf…7.5
• CVE-2019-1000033Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-1000041Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2019-1000047Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…