CVE-2018-20678

LibreNMS through 1.47 allows SQL injection via the html/ajax_table.php sort[hostname] parameter, exploitable by authenticated users during a search

published March 28, 2019

CVSS
—
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

LibreNMS through 1.47 allows SQL injection via the html/ajax_table.php sort[hostname] parameter, exploitable by authenticated users during a search.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01378 · 71.9th percentile
Published
2019-03-28T15:21Z
EPSS history
Timeline
  • 28 MAR 15:21Z
    LibreNMS through 1.47 allows SQL injection via the html/ajax_table.php sort[hostname] parameter, exploitable by authenticated users during a search
    cvelistv5