GHSA-62Q7-QJ6G-GVR7 LibreNMS arbitrary OS commands execution

LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $POST'community' parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajaxoutput.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers...

GHSA-9M82-F3WX-P625 LibreNMS XSS Vulnerability

Persistent Cross-Site Scripting XSS issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboardname parameter in the /ajaxform.php resource, related to html/includes/forms/add-dashboard.inc.php, html/includes/forms/delete-dashboard.inc.php, and...

GHSA-4FWH-R866-PVH9 LibreNMS SQL Injection

LibreNMS through 1.47 allows SQL injection via the html/ajaxtable.php sorthostname parameter, exploitable by authenticated users during a search...

LibreNMS SQL Injection

LibreNMS through 1.47 allows SQL injection via the html/ajaxtable.php sorthostname parameter, exploitable by authenticated users during a search...

GHSA-4CCX-WJQP-5FWW LibreNMS Arbitrary File Read

The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php...

LibreNMS Arbitrary File Read

The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php...

librenms bills Description & Notes Stored XSS

Description Please enter a description of the vulnerability. Proof of Concept 1. Login 2. go to http://librenms/bills 3. Click to Create Bill 4. Add Description or Notes "" // PoC.js payload1 payload2 POST /bills/ HTTP/1.1 Host: 192.168.0.4 Connection: keep-alive Content-Length: 310 Cache-Control...

Librenms Cross-Site Scripting Vulnerability (CNVD-2022-15529)

Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates.Librenms suffers from a cross-site scripting vulnerability that stems from the lack of proper...

Cross-site Scripting (XSS)

librenms/librenms is vulnerable to cross-site scripting. An attacker can inject and execute malicious javascript through the ruledisplay parameter in alertrulelist.inc.php...

GHSA-VHM6-GW82-6F8J Cross site scripting in LibreNMS

LibreNMS prior to version 22.2.2 is vulnerable to cross-site scripting...

Cross site scripting in LibreNMS

LibreNMS prior to version 22.2.2 is vulnerable to cross-site scripting...

CVE-2022-0772

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...

CVE-2022-0772

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...

CVE-2022-0772 Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...

CVE-2022-0772

LibreNMS (librenms/librenms) contains a Stored XSS vulnerability that affects versions before 22.2.2. Root cause: improper handling/validation of client-side data in the web application. Impact per sources: Cross-site scripting with potential for user-assisted or automatic execution of client-sid...

CVE-2022-0772 Cross-site Scripting (XSS) - Stored in librenms/librenms

Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...

Librenms 跨站脚本漏洞

Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates.Librenms suffers from a cross-site scripting vulnerability that stems from the lack of proper...

librenms Information Disclosure Vulnerability (CNVD-2022-12751)

Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates. librenms suffers from an information disclosure vulnerability that stems from allowing users with...

librenms Cross-Site Scripting Vulnerability (CNVD-2022-12750)

Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates. librenms suffers from a cross-site scripting vulnerability that stems from a lack of data validatio...