CVE-2020-15873

In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php

published July 21, 2020

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02238 · 82.7th percentile
Published
2020-07-21T16:03Z
EPSS history
Timeline
  • 21 JUL 16:03Z
    In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php
    cvelistv5