Description (CNA)
PHP code injection in watolib auth.php and hosttags.php in Tribe29's Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker to inject and execute PHP code which will be executed upon request of the vulnerable component.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Tribe29 / Checkmk | affected 2.0.0 through 2.0.0p27; affected 2.1.0 through 2.1.0p10; affected 1.6.0 through 1.6.0p29 |
CWE
CWE-20
References
ADP enrichment
No English description supplied.