CVE-2020-35700

A second-order SQL injection issue in Widgets/TopDevicesController.php aka the Top Devices dashboard widget of LibreNMS before 21.1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the sortorder parameter against the /ajax/form/widget-settings endpoint...

CVE-2020-35700

CVE-2020-35700 affects LibreNMS prior to 21.1.0, where a second-order SQL injection in Widgets/TopDevicesController.php (Top Devices widget) enables remote authenticated attackers to execute arbitrary SQL via the sort_order parameter on /ajax/form/widget-settings. Exploitation status is not detai...

PT-2021-11828

Name of the Vulnerable Software and Affected Versions: LibreNMS versions prior to 21.1.0 Description: A second-order SQL injection issue in the Top Devices dashboard widget of LibreNMS allows remote authenticated attackers to execute arbitrary SQL commands via the sort order parameter against the...