Cross-Site Scripting (XSS)

LibreNMS is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript and HTML into a victim's browser through the dashboardname parameter in ajaxform.php...

LibreNMS Cross-Site Scripting Vulnerability

LibreNMS is an open source network monitoring system based on PHP and MySQL. The system features customizable alerts , auto-discovery of the network environment and automatic updates . A cross-site scripting vulnerability exists in several files in LibreNMS versions prior to 1.44. A remote attack...

CVE-2018-18478

Persistent Cross-Site Scripting XSS issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboardname parameter in the /ajaxform.php resource, related to html/includes/forms/add-dashboard.inc.php, html/includes/forms/delete-dashboard.inc.php, and...

CVE-2018-18478

LibreNMS before version 1.44 is vulnerable to a persistent XSS via the dashboard_name parameter in ajax_form.php, related to html/includes/forms/add-dashboard.inc.php, delete-dashboard.inc.php, and edit-dashboard.inc.php. An attacker could inject arbitrary web script/HTML that may be executed in ...

CVE-2018-18478

Persistent Cross-Site Scripting XSS issues in LibreNMS before 1.44 allow remote attackers to inject arbitrary web script or HTML via the dashboardname parameter in the /ajaxform.php resource, related to html/includes/forms/add-dashboard.inc.php, html/includes/forms/delete-dashboard.inc.php, and...

Unauthorized Arbitrary File Read

librenms is vulnerable to unauthorized arbitrary file reads. The attack is only possible during the installation process where authentication can be bypassed and arbitrary files related to html/install.php become readable...

LibreNMS Arbitrary File Read Vulnerability

LibreNMS is an open source network monitoring system based on PHP and MySQL. The system features customizable alerts , auto-discovery of the network environment and automatic updates . A security vulnerability exists in the installation process in versions of LibreNMS prior to 2017-08-18. A remot...

CVE-2017-16759

The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php...

Design/Logic Flaw

The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php...

CVE-2017-16759

The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php...

CVE-2017-16759

CVE-2017-16759 affects LibreNMS: the installation process before 2017-08-18 allows remote attackers to read arbitrary files via html/install.php. Multiple connected sources (GitHub security advisory GHSA-4CCX-WJQP-5FWW, OSV, CNVD/CNVD-2017-36362, NVD entry) corroborate an arbitrary file read duri...

CVE-2017-16759

The installation process in LibreNMS before 2017-08-18 allows remote attackers to read arbitrary files, related to html/install.php...

Network Monitoring System: LibreNMS

LibreNMS is an autodiscovering PHP/MySQL/SNMP based network monitoring tool which includes support for a wide range of network hardware and operating systems including Cisco, Linux, FreeBSD, Juniper, Brocade, Foundry, HP and many more. LibreNMS is a community-based fork of Observium. Install On t...