Sql injection

2018-02-0923:29:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.1%

JSON

Security Onion Solutions Squert version 1.1.1 through 1.6.7 contains a SQL Injection vulnerability in .inc/callback.php that can result in execution of SQL commands. This attack appear to be exploitable via Web request to .inc/callback.php with the payload in the sensors parameter, used in ec(). This vulnerability appears to have been fixed in 1.7.0.

CPENameOperatorVersion
squertge1.1.1
squertle1.6.7

CPE	Name	Operator	Version
	squert	ge	1.1.1
	squert	le	1.6.7

References

blog.securityonion.net/2018/01/security-advisory-for-squert.html