CVE-2018-19410
🗓️ 21 Nov 2018 16:00:00Reported by mitreType 
cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 389 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 17 |
|---|---|---|---|---|
 | CVE-2018-19410 | 21 Nov 201800:00 | – | attackerkb |
 | The vulnerability of network monitoring software for PRTG Network Monitor, related to insecure privilege management, allows a intruder to create users with privileges for “read and write” operations. | 20 Dec 201800:00 | – | bdu_fstec |
 | CVE-2018-19410 | 13 Aug 202304:23 | – | circl |
 | Paessler PRTG Network Monitor Local File Inclusion Vulnerability | 4 Feb 202500:00 | – | cisa_kev |
 | CISA Adds Four Known Exploited Vulnerabilities to Catalog | 4 Feb 202512:00 | – | cisa |
 | PRTG Network Monitor File Inclusion Vulnerability | 22 Nov 201800:00 | – | cnvd |
 | CVE-2018-19410 | 21 Nov 201816:00 | – | cvelist |
 | PRTG Network Monitor - Local File Inclusion | 13 Aug 202604:34 | – | nuclei |
 | CVE-2018-19410 | 21 Nov 201816:29 | – | nvd |
 | PRTG Network Monitor <= 18.2.39.1661 Multiple Vulnerabilities | 22 Nov 201800:00 | – | openvas |
10
Node
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| id | query param | /api/addusers | Unauthenticated attacker can craft a request to /api/addusers via LFI in /public/login.htm to create a user with read-write/administrator privileges. | CWE-98 |
| users | query param | /api/addusers | Unauthenticated attacker can craft a request to /api/addusers via LFI in /public/login.htm to create a user with read-write/administrator privileges. | CWE-98 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 01:49Current
9.4High risk
Vulners AI Score9.4
CVSS 27.5
CVSS 3.19.8
EPSS0.86579
SSVC