CVE-2019-10123

This Metasploit module exploits an unauthenticated SQL injection vulnerability in AIS logistics ESEL-Server to achieve remote code execution via `xp_cmdshell`. It leverages a flawed login process to inject arbitrary SQL commands, typically targeting MSSQL servers with the 'sa' user.

This Metasploit module exploits an unauthenticated SQL injection vulnerability in AIS logistics ESEL-Server, allowing remote code execution via `xp_cmdshell`. The exploit crafts a malicious login message to inject SQL commands, enabling payload execution on the target system.