Critical severity9.8NVD Advisory· Published Jul 24, 2018· Updated Jun 17, 2026
CVE-2018-5384
CVE-2018-5384
Description
Navarino Infinity web interface up to version 2.2 exposes an unauthenticated script that is prone to blind sql injection. If successfully exploited the user can get info from the underlying postgresql database that could lead into to total compromise of the product. The said script is available with no authentication.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/146506/Navarino-Infinity-Blind-SQL-Injection-Session-Fixation.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/103544nvdThird Party AdvisoryVDB Entry
- www.kb.cert.org/vuls/id/184077nvdThird Party AdvisoryUS Government Resource
- medium.com/%40evstykas/pwning-ships-vsat-for-fun-and-profit-ba0fe9f42fb3nvd
News mentions
0No linked articles in our index yet.