2 matches found
SQL Injection in librenms
A second-order SQL injection issue in Widgets/TopDevicesController.php aka the Top Devices dashboard widget of LibreNMS before 21.1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the sortorder parameter against the /ajax/form/widget-settings endpoint...
8.8CVSS9.4AI score0.0234EPSS
SaveExploits1References7Affected Software1
GHSA-H59F-P56G-G75V SQL Injection in librenms
A second-order SQL injection issue in Widgets/TopDevicesController.php aka the Top Devices dashboard widget of LibreNMS before 21.1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the sortorder parameter against the /ajax/form/widget-settings endpoint...
8.8CVSS9AI score0.0234EPSS
SaveExploits1References6
20