| Package | Affected versions | Patched versions |
|---|---|---|
| network olympus | = 1.8.0 |
Network Olympus version 1.8.0 allows an authenticated admin user to inject SQL queries in '/api/eventinstance' via the 'sqlparameter' JSON parameter. It is also possible to achieve remote code execution in the default installation (PostgreSQL) by exploiting this issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free