CVE-2021-26751 | BDVDB-2026-149148 Detail

Description#

NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php via the det HTTP GET parameter. This allows an attacker to access all the data in the database and obtain access to the NeDi application.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://n4nj0.github.io/advisories/nedi-multiple-vulnerabilities-i/

Exploit#

No public exploit known

History#

Version 12021-02-12Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.