CVE-2019-17117

PoC —

CVSS 3.1

8.8 high

EPSS

2%p77

Published

Oct 17, 2019 (Oct 17, 2019)

Modified

Jun 17, 2026

Description

A SQL injection vulnerability in processPref.jsp in WiKID 2FA Enterprise Server through 4.2.0-b2053 allows an authenticated user to execute arbitrary SQL commands via the processPref.jsp key parameter.

Vendors: wikidsystems
Products: 2fa enterprise server
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.