CVE-2019-19245: Napc Xinet Elegant 6 Asset Library

Critical severity, CVSS 9.8. EPSS: 7.9% chance of exploitation in the next 30 days.

NAPC Xinet Elegant 6 Asset Library 6.1.655 allows Pre-Authentication SQL Injection via the /elegant6/login LoginForm[username] field when double quotes are used.

Affected products

• Napc Xinet Elegant 6 Asset Library: version 6.1.655 only

Published 2019-12-02. Last modified 2026-06-17.