CVE-2018-1000042

Security Onion Solutions Squert version 1.3.0 through 1.6.7 contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in .inc/callback.php that can result in execution of OS Commands. This attack appear to be exploitable via Web request to .inc/callback.php with the payload in the data or obj parameters, used in autocat(). This vulnerability appears to have been fixed in 1.7.0.

• CWE-78

• http://blog.securityonion.net/2018/01/security-advisory-for-squert.htmlPatch, Vendor Advisory
• http://blog.securityonion.net/2018/01/security-advisory-for-squert.htmlPatch, Vendor Advisory

Published

Feb 9, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-1000036In Artifex MuPDF 1.12.0 and earlier, multiple memory leaks i…5.5
• CVE-2018-1000037In Artifex MuPDF 1.12.0 and earlier, multiple reachable asse…5.5
• CVE-2018-1000038In Artifex MuPDF 1.12.0 and earlier, a stack buffer overflow…
• CVE-2018-1000039In Artifex MuPDF 1.12.0 and earlier, multiple heap use after…6.3
• CVE-2018-1000040In Artifex MuPDF 1.12.0 and earlier, multiple use of uniniti…
• CVE-2018-1000041GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b…
• CVE-2018-1000043Security Onion Solutions Squert version 1.0.1 through 1.6.7 …
• CVE-2018-1000044Security Onion Solutions Squert version 1.1.1 through 1.6.7 …
• CVE-2018-1000045NASA Singledop version v1.0 contains a CWE-502 vulnerability…
• CVE-2018-1000046NASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerab…
• CVE-2018-1000047NASA Kodiak version v1.0 contains a CWE-502 vulnerability in…
• CVE-2018-1000048NASA RtRetrievalFramework version v1.0 contains a CWE-502 vu…