CVE-2019-13191: Mapsolutions Intramaps

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

A SQL injection vulnerability in IntraMaps MapControl 8 allows attackers to execute arbitrary SQL commands via the /ApplicationEngine/Search/Refine/Set page.

Affected products

• Mapsolutions Intramaps: from 8.0, before 8.1 (fixed in 8.1)

Published 2019-09-05. Last modified 2026-06-17.