Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2020/09/25 5:35 p.m.•40 views

CVE-2020-25143

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection due to the fact that it is possible to inject malicious SQL statements in malformed parameter types. This can occur via /ajax/deviceentities.php?entitytype=netscalervsvr&devicei...

9AI score0.01193EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/25 12:00 a.m.•5 views

CVE-2020-25143: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection due to the fact that it is possible to inject malicious SQL statements in malformed parameter types. This can occur via /ajax/deviceentities.php?entitytype=netscalervsvr&devicei...

8.8CVSS5.8AI score0.01193EPSS
SaveExploits0References2
Rows per page
Query Builder