CVE-2019-5893

Nelson Open Source ERP v6.3.1 allows SQL Injection via the db/utils/query/data.xml query parameter.

• CWE-89

• https://github.com/EmreOvunc/OpenSource-ERP-SQL-InjectionExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/46118/Exploit, Third Party Advisory, VDB Entry
• https://github.com/EmreOvunc/OpenSource-ERP-SQL-InjectionExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/46118/Exploit, Third Party Advisory, VDB Entry

Published

Jan 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5887An issue was discovered in ShopXO 1.2.0. In the UnlinkDir me…
• CVE-2019-5888Multiple XSS vulnerabilities were discovered in OverIT Geoca…6.1
• CVE-2019-5889An log-management directory traversal issue was discovered i…7.5
• CVE-2019-5890An issue was discovered in OverIT Geocall 6.3 before build 2…8.8
• CVE-2019-5891An issue was discovered in OverIT Geocall 6.3 before build 2…9.8
• CVE-2019-5892bgpd in FRRouting FRR (aka Free Range Routing) 2.x and 3.x b…
• CVE-2019-5909License Manager Service of YOKOGAWA products (CENTUM VP (R5.…
• CVE-2019-5910Directory traversal vulnerability in HOUSE GATE App for iOS …
• CVE-2019-5911Untrusted search path vulnerability in the installer of UNLH…
• CVE-2019-5912Untrusted search path vulnerability in the installer of UNAR…
• CVE-2019-5913Untrusted search path vulnerability in the installer of LHMe…
• CVE-2019-5914V20 PRO L-01J software version L01J20c and L01J20d has a NUL…