Security Advisory

CVE-2018-20727

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-01-17 02:00:00

Last updated 2024-08-05 12:12:27

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Multiple command injection vulnerabilities in NeDi before 1.7Cp3 allow authenticated users to execute code on the server side via the flt parameter to Nodes-Traffic.php, the dv parameter to Devices-Graph.php, or the tit parameter to drawmap.php.

← Browse all CVEs View on cve.org ↗