Skip to content
CVE Tracker
Back

CVE-2016-20096

Linknat VOS3000/VOS2009 2.1.2.0 SQL Injection via login.jsp

Critical9.3EPSS 0.67%
Published
Updated
Reserved
Assigned by
VulnCheck

Description

Linknat VOS3000 and VOS2009 through version 2.1.2.0 contain an unauthenticated SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by manipulating the name parameter in a POST request to the login endpoint. Attackers can inject malicious SQL through the login form and retrieve injected query results from a subsequent session request, enabling extraction of plaintext credentials and other database content with DBA-level privileges.

Scores

CVSS scores of CVE-2016-20096, by who scored it
Scored byCVSSScoreVector
VulnCheckCNA (assigner)4.0Critical9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
VulnCheckCNA (assigner)3.1Critical9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Deferred4.0Critical9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS (exploitation in 30 days)
0.67% · top 48% of all CVEs (2 Nov 2026)
CISA SSVC
Exploitation: poc · Automatable: yes · Technical impact: total

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.3.

Weakness

Affected products

  • Kunshi Network Technology Co., Ltd. · Linknat VOS3000

    • affected 2.1.1.5
    • affected 2.1.1.8
    • affected 2.1.2.0

  • Kunshi Network Technology Co., Ltd. · Linknat VOS2009

    • affected 2.1.1.5
    • affected 2.1.1.8
    • affected 2.1.2.0

References (4)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .