CVE-2018-1000044
Last modified
CVE-2018-1000044 is a vulnerability of currently unknown severity. Security Onion Solutions Squert version 1.1.1 through 1.6.7 contains a SQL Injection vulnerability in .inc/callback.php that can result in execution of SQL commands. This attack appear to be exploitable via Web request to .inc/callback.php with the payload in the sensors parameter, used in ec(). EPSS estimates a 1.98% chance of exploitation in the next 30 days.
Description
Security Onion Solutions Squert version 1.1.1 through 1.6.7 contains a SQL Injection vulnerability in .inc/callback.php that can result in execution of SQL commands. This attack appear to be exploitable via Web request to .inc/callback.php with the payload in the sensors parameter, used in ec(). This vulnerability appears to have been fixed in 1.7.0.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Securityonion | Squert | >= 1.1.1, <= 1.6.7 |
References
- http://blog.securityonion.net/2018/01/security-advisory-for-squert.htmlPatch, Vendor Advisory
- http://blog.securityonion.net/2018/01/security-advisory-for-squert.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-1000044?
How severe is CVE-2018-1000044?
How do I fix CVE-2018-1000044?
Are you affected by CVE-2018-1000044?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST