CVE-2018-5386

概要

参考情報

• securityfocus.com/bid/103544 · Third Party Advisory
• medium.com/%40evstykas/pwning-ships-vsat-for-fun-and-profit-ba0fe9f42fb3
• packetstormsecurity.com/files/146506/Navarino-Infinity-Blind-SQL-Injection-Session-Fixation.html · Exploit
• kb.cert.org/vuls/id/184077 · Third Party Advisory

infinity のその他の脆弱性

• CVE-2018-5385高 8.8Navarino Infinity is prone to session fixation attacks. The server accepts the session ID as a GET parameter which can lead to bypassing the…
• CVE-2018-5384緊急 9.8Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql injection. If successfully ex…