CVE-2019-12465

An issue was discovered in LibreNMS 1.50.1. A SQL injection flaw was identified in the ajaxrulesuggest.php file where the term parameter is used insecurely in a database query for showing columns of a table, as demonstrated by an ajaxrulesuggest.php?debug=1&term= request...

CVE-2019-12465

CVE-2019-12465 concerns LibreNMS 1.50.1 where a SQL injection flaw is caused by insecure handling of the term parameter in ajax_rulesuggest.php, enabling manipulation of database queries to show table columns. Documented across multiple sources (Red Hat, GHSA, OSV/OSV.dev, CNVD, NVD, CNVD, Veraco...