Metinfo - SQLi (CVE-2019-16996)

CVE-2019-16996 is a vulnerability in Metinfo allowing attackers to perform SQL injection attacks through a specific administrative endpoint.

CrowdSec has been tracking this vulnerability and its exploits since 3rd of April 2025.

According to CrowdSec data, while opportunistic exploitation dominates, a portion of threat actors trying to exploit CVE-2019-16996 apply basic targeting methods such as port or service detection. This indicates emerging patterns of selective targeting. Telemetry from the CrowdSec network also shows that exploitation activity for CVE-2019-16996 remains steady week-over-week. Attack volumes are consistent with long-term trends, indicating sustained interest from threat actors. CVE-2019-16996 continues to be an active part of the threat landscape and will likely remain this way for the forseeable future.

Attempts to exploit this vulnerability typically target URLs containing /admin/?n=product&c=product_admin&a=dopara&app_type=shop.