CVE-2021-26751

NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php via the det HTTP…

published February 12, 2021

CVSS
—
EPSS
1%
Percentile
68.6
In the wild
Unconfirmed
What it is

NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php via the det HTTP GET parameter. This allows an attacker to access all the data in the database and obtain access to the NeDi application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01227 · 68.6th percentile
Published
2021-02-12T20:35Z
EPSS history
Timeline
  • 12 FEB 20:35Z
    NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php via the det HTTP…
    cvelistv5