CVE-2019-10123: Ais Logistic Software

Critical severity, CVSS 9.8. EPSS: 65.9% chance of exploitation in the next 30 days.

SQL Injection in Advanced InfoData Systems (AIS) ESEL-Server 67 (which is the backend for the AIS logistics mobile app) allows an anonymous attacker to execute arbitrary code in the context of the user of the MSSQL database. The default user for the database is the 'sa' user.

Affected products

• Ais Logistic Software: up to and including 67

Published 2019-05-31. Last modified 2026-06-17.