1207 matches found
librenms bills Description & Notes Stored XSS
Description Please enter a description of the vulnerability. Proof of Concept 1. Login 2. go to http://librenms/bills 3. Click to Create Bill 4. Add Description or Notes "" // PoC.js payload1 payload2 POST /bills/ HTTP/1.1 Host: 192.168.0.4 Connection: keep-alive Content-Length: 310 Cache-Control...
Librenms Cross-Site Scripting Vulnerability (CNVD-2022-15529)
Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates.Librenms suffers from a cross-site scripting vulnerability that stems from the lack of proper...
Cross-site Scripting (XSS)
librenms/librenms is vulnerable to cross-site scripting. An attacker can inject and execute malicious javascript through the ruledisplay parameter in alertrulelist.inc.php...
GHSA-VHM6-GW82-6F8J Cross site scripting in LibreNMS
LibreNMS prior to version 22.2.2 is vulnerable to cross-site scripting...
Cross site scripting in LibreNMS
LibreNMS prior to version 22.2.2 is vulnerable to cross-site scripting...
CVE-2022-0772
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...
CVE-2022-0772
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...
Cross site scripting
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...
CVE-2022-0772
LibreNMS (librenms/librenms) contains a Stored XSS vulnerability that affects versions before 22.2.2. Root cause: improper handling/validation of client-side data in the web application. Impact per sources: Cross-site scripting with potential for user-assisted or automatic execution of client-sid...
CVE-2022-0772 Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...
CVE-2022-0772 Cross-site Scripting (XSS) - Stored in librenms/librenms
Cross-site Scripting XSS - Stored in GitHub repository librenms/librenms prior to 22.2.2...
Librenms 跨站脚本漏洞
Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates.Librenms suffers from a cross-site scripting vulnerability that stems from the lack of proper...
librenms Information Disclosure Vulnerability (CNVD-2022-12751)
Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates. librenms suffers from an information disclosure vulnerability that stems from allowing users with...
librenms Cross-Site Scripting Vulnerability (CNVD-2022-12750)
Librenms is a PHP and MySQL based open source network monitoring system from the Librenms community. The system features custom alerts, auto-discovery of network environments and automatic updates. librenms suffers from a cross-site scripting vulnerability that stems from a lack of data validatio...
Cross-site Scripting (XSS)
librenms is vulnerable to cross-site scripting. The vulnerability exists due to a lack of sanitization of input via the dashboardname allowing an attacker to inject maliciously crafted scripts into the system...
Improper Authorization
librenms is vulnerable to improper authorization. The vulnerability exists due to the lack of validation of the user's role and level allowing an attacker to switch on/off installed plugins...
Improper Access Control
librenms/librenms is vulnerable to improper access control. Missing to keep plugin admin pages to be within admin route and missing admin check/control allows an attacker to perform unauthorized access...
Information Leakage
librenms/librenms is vulnerable to information leakage. Missing to keep plugin admin pages to be within admin route and missing admin check/control causes leakages of sensitive information...