Command Injection

librenms/librenms is vulnerable to command injection. The vulnerability exists in poll_service function because the service_ip, hostname, and service_param parameters are not properly handled which allows an attacker to inject and execute arbitrary commands.