Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-1000044

Опубликовано: 09 фев. 2018
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

Security Onion Solutions Squert version 1.1.1 through 1.6.7 contains a SQL Injection vulnerability in .inc/callback.php that can result in execution of SQL commands. This attack appear to be exploitable via Web request to .inc/callback.php with the payload in the sensors parameter, used in ec(). This vulnerability appears to have been fixed in 1.7.0.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:securityonion:squert:*:*:*:*:*:*:*:*
Версия от 1.1.1 (включая) до 1.6.7 (включая)

EPSS

Процентиль: 75%
0.00891
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

CVSS3: 9.8
github
около 3 лет назад

Security Onion Solutions Squert version 1.1.1 through 1.6.7 contains a SQL Injection vulnerability in .inc/callback.php that can result in execution of SQL commands. This attack appear to be exploitable via Web request to .inc/callback.php with the payload in the sensors parameter, used in ec(). This vulnerability appears to have been fixed in 1.7.0.

EPSS

Процентиль: 75%
0.00891
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89