CVE-2019-10670

An issue was discovered in LibreNMS through 1.47. Many of the scripts rely on the function mysqliescaperealstring for filtering data. However, this is particularly ineffective when returning user supplied input in an HTML or a JavaScript context, resulting in unsafe data being injected into these...

CVE-2019-10670: Improper Neutralization of Input During Web Page Generation

An issue was discovered in LibreNMS through 1.47. Many of the scripts rely on the function mysqliescaperealstring for filtering data. However, this is particularly ineffective when returning user supplied input in an HTML or a JavaScript context, resulting in unsafe data being injected into these...

PT-2019-11983

Name of the Vulnerable Software and Affected Versions LibreNMS versions prior to 1.48 Description An issue in LibreNMS allows unsafe data to be injected into HTML or JavaScript contexts due to ineffective filtering of user-supplied input using the mysqli escape real string function. This can lead...