| Package | Affected versions | Patched versions |
|---|---|---|
| nedi | ≤ 1.7c |
Multiple command injection vulnerabilities in NeDi before 1.7Cp3 allow authenticated users to execute code on the server side via the flt parameter to Nodes-Traffic.php, the dv parameter to Devices-Graph.php, or the tit parameter to drawmap.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free