Security Advisory
CVE-2018-20730
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
A SQL injection vulnerability in NeDi before 1.7Cp3 allows any user to execute arbitrary SQL read commands via the query.php component.