| Package | Affected versions | Patched versions |
|---|---|---|
| squert | ≥ 1.1.1, ≤ 1.6.7 |
Security Onion Solutions Squert version 1.1.1 through 1.6.7 contains a SQL Injection vulnerability in .inc/callback.php that can result in execution of SQL commands. This attack appear to be exploitable via Web request to .inc/callback.php with the payload in the sensors parameter, used in ec(). This vulnerability appears to have been fixed in 1.7.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free