LibreNMS SQL Injection Vulnerability

LibreNMS is an open source network monitoring system based on PHP and MySQL. The system features customizable alerts , auto-discovery of the network environment and automatic updates . A SQL injection vulnerability exists in the html/ajaxtable.php file in LibreNMS 1.47 and earlier versions. A...

PT-2019-10157

Name of the Vulnerable Software and Affected Versions: LibreNMS versions prior to 1.48 Description: The issue allows SQL injection via the sorthostname parameter in the "html/ajax table.php" endpoint, which can be exploited by authenticated users during a search. Recommendations: For versions pri...

CVE-2017-5677

PEAR HTMLAJAX 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer. It allows remote code execution. In one viewpoint, the root cause is an incorrect regular expression...

PT-2017-16666

Name of the Vulnerable Software and Affected Versions PEAR HTML AJAX versions 0.3.0 through 0.5.7 Description The issue is related to a PHP Object Injection Vulnerability in the PHP Serializer, which allows remote code execution. The root cause is attributed to an incorrect regular expression...

PT-2014-9146

Name of the Vulnerable Software and Affected Versions php-pear-HTML AJAX versions prior to 0.5.7 Description The issue allows for remote code execution through unspecified vectors. Recommendations For versions prior to 0.5.7, update to version 0.5.7 or later to resolve the issue...