CVE-2019-10664

NONE EPSS 93.8%
Published Mar 31, 20197y ago · Modified Jun 17, 20262w ago
Find Similar
Published Mar 31, 2019 7y ago
Last Modified Jun 17, 2026 2w ago

Description

Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp.

Threat Intelligence

EPSS Exploit Probability
93.8% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-89 SQL Injection Injection

Affected Products 1

VendorProductVersionRange
domoticzdomoticz* <4.10578

References 3

  • packetstormsecurity.com http://packetstormsecurity.com/files/152678/Domoticz-4.10577-Unauthenticated-Remote-Command-Execution.html
    Third Party AdvisoryVDB Entry
  • github.com https://github.com/domoticz/domoticz/commit/ee70db46f81afa582c96b887b73bcd2a86feda00
    PatchThird Party Advisory
  • exploit-db.com https://www.exploit-db.com/exploits/46773/
    Third Party AdvisoryVDB Entry

Remediation

  • github.com https://github.com/domoticz/domoticz/commit/ee70db46f81afa582c96b887b73bcd2a86feda00
    PatchThird Party Advisory