Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php via the det HTTP GET parameter. This allows an attacker to access all the data in the database and obtain access to the NeDi application.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Nedi Consulting NeDi SQL注入漏洞
Vulnerability Description
Nedi Consulting NeDi是瑞士NeDi Consulting（Nedi Consulting）公司的一套支持发现和映射网络设备的开源软件。 NeDi 1.9C中存在SQL注入漏洞，该漏洞源于基于数据库的应用缺少对外部输入SQL语句的验证。攻击者可利用该漏洞执行非法SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A