CVE-2019-5476 | BDVDB-2026-120621 Detail

lookup.nextcloud.com

Description#

An SQL Injection in the Nextcloud Lookup-Server < v0.3.0 (running on https://lookup.nextcloud.com) caused unauthenticated users to be able to execute arbitrary SQL commands.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

References#

https://hackerone.com/reports/508487

Exploit#

No public exploit known

History#

Version 12019-08-07Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.