CVE-2019-10666

An issue was discovered in LibreNMS through 1.47. Several of the scripts perform dynamic script inclusion via the include function on user supplied input without sanitizing the values by calling basename or a similar function. An attacker can leverage this to execute PHP code from the included...

CVE-2019-10666

creationtimestamp| type| source ---|---|--- 2019-09-09 16:39:12+00:00| seen| https://t.me/cibsecurity/6602...

CVE-2019-10666

An issue was discovered in LibreNMS through 1.47. Several of the scripts perform dynamic script inclusion via the include function on user supplied input without sanitizing the values by calling basename or a similar function. An attacker can leverage this to execute PHP code from the included...

CVE-2019-10666

An issue was discovered in LibreNMS through 1.47. Several of the scripts perform dynamic script inclusion via the include function on user supplied input without sanitizing the values by calling basename or a similar function. An attacker can leverage this to execute PHP code from the included...

CVE-2019-10666

CVE-2019-10666 : LibreNMS up to version 1.47 is affected. Several scripts perform dynamic script inclusion via include() on user-supplied input without proper sanitization (missing basename() or equivalent). This can let an attacker execute PHP code from an included file. While the attack is miti...