CVE-2018-20727

PoC —

CVSS 3.0

8.8 high

EPSS

6%p92

Published

Jan 17, 2019 (Jan 17, 2019)

Modified

Jun 17, 2026

Description

Multiple command injection vulnerabilities in NeDi before 1.7Cp3 allow authenticated users to execute code on the server side via the flt parameter to Nodes-Traffic.php, the dv parameter to Devices-Graph.php, or the tit parameter to drawmap.php.

Vendors: nedi
Products: nedi
Weakness: CWE-78
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.6%)

In the news0 stories

No ingested article mentions this CVE yet.