Количество 2
Количество 2
CVE-2018-20434
LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers html/includes/output/capture.inc.php command mishandling.
GHSA-62q7-qj6g-gvr7
LibreNMS arbitrary OS commands execution
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-20434 LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers html/includes/output/capture.inc.php command mishandling. | CVSS3: 9.8 | 67% Средний | почти 7 лет назад |
| GHSA-62q7-qj6g-gvr7 LibreNMS arbitrary OS commands execution | CVSS3: 9.8 | 67% Средний | больше 3 лет назад |
Уязвимостей на страницу