| Package | Affected versions | Patched versions |
|---|---|---|
| nedi | = 1.9c |
NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php via the det HTTP GET parameter. This allows an attacker to access all the data in the database and obtain access to the NeDi application.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free