Описание
LibreNMS SQL Injection
LibreNMS through 1.47 allows SQL injection via the html/ajax_table.php sort[hostname] parameter, exploitable by authenticated users during a search.
Пакеты
Наименование
librenms/librenms
composer
Затронутые версииВерсия исправления
<= 1.47
1.65
Связанные уязвимости
CVSS3: 8.8
nvd
почти 7 лет назад
LibreNMS through 1.47 allows SQL injection via the html/ajax_table.php sort[hostname] parameter, exploitable by authenticated users during a search.