CVE-2019-12463

An issue was discovered in LibreNMS 1.50.1. The scripts that handle graphing options includes/html/graphs/common.inc.php and includes/html/graphs/graphs.inc.php do not sufficiently validate or encode several fields of user supplied input. Some parameters are filtered with mysqlirealescapestring,...

CVE-2019-10665

An issue was discovered in LibreNMS through 1.47. The scripts that handle the graphing options html/includes/graphs/common.inc.php and html/includes/graphs/graphs.inc.php do not sufficiently validate or encode several fields of user supplied input. Some parameters are filtered with...

PT-2019-12808

Name of the Vulnerable Software and Affected Versions LibreNMS version 1.50.1 Description The issue arises from insufficient validation or encoding of user-supplied input in scripts handling graphing options. Specifically, the includes/html/graphs/common.inc.php and...

CVE-2019-12463: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue was discovered in LibreNMS 1.50.1. The scripts that handle graphing options includes/html/graphs/common.inc.php and includes/html/graphs/graphs.inc.php do not sufficiently validate or encode several fields of user supplied input. Some parameters are filtered with mysqlirealescapestring,...

CVE-2019-10665: Improper Neutralization of Special Elements in Output Used by a Downstream Component

An issue was discovered in LibreNMS through 1.47. The scripts that handle the graphing options html/includes/graphs/common.inc.php and html/includes/graphs/graphs.inc.php do not sufficiently validate or encode several fields of user supplied input. Some parameters are filtered with...

PT-2019-11978

Name of the Vulnerable Software and Affected Versions LibreNMS versions 1.47 and earlier Description The issue arises from insufficient validation or encoding of user-supplied input in the scripts handling graphing options, specifically in html/includes/graphs/common.inc.php and...