CVE-2018-1000044

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-02-09 · updated 2026-06-17
Weakness: CWE-89

Description

Security Onion Solutions Squert version 1.1.1 through 1.6.7 contains a SQL Injection vulnerability in .inc/callback.php that can result in execution of SQL commands. This attack appear to be exploitable via Web request to .inc/callback.php with the payload in the sensors parameter, used in ec(). This vulnerability appears to have been fixed in 1.7.0.

Affected products

Securityonion Squert: from 1.1.1 through 1.6.7

References

http://blog.securityonion.net/2018/01/security-advisory-for-squert.html
http://blog.securityonion.net/2018/01/security-advisory-for-squert.html

Get alerted when CVE-2018-1000044 or the next vulnerability affects your stack