CVE-2018-1000044

2018-02-0923:29:01

Google

osv.dev

0.002 Low

EPSS

Percentile

57.1%

JSON

Security Onion Solutions Squert version 1.1.1 through 1.6.7 contains a SQL Injection vulnerability in .inc/callback.php that can result in execution of SQL commands. This attack appear to be exploitable via Web request to .inc/callback.php with the payload in the sensors parameter, used in ec(). This vulnerability appears to have been fixed in 1.7.0.

CPENameOperatorVersion
squerteq1.1.2
squerteq1.1.4
squerteq1.1.1
squerteq1.1.6
squerteq1.1.7
squerteq1.4.0
squerteq1.5.0
squerteq1.2.0
squerteq1.1.5
squerteq1.1.8