Vulnerability Details CVE-2018-20678
LibreNMS through 1.47 allows SQL injection via the html/ajax_table.php sort[hostname] parameter, exploitable by authenticated users during a search.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 1.1%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
Products affected by CVE-2018-20678
-
cpe:2.3:a:librenms:librenms:-
-
cpe:2.3:a:librenms:librenms:0.1
-
cpe:2.3:a:librenms:librenms:1.19
-
cpe:2.3:a:librenms:librenms:1.20
-
cpe:2.3:a:librenms:librenms:1.20.1
-
cpe:2.3:a:librenms:librenms:1.21
-
cpe:2.3:a:librenms:librenms:1.22
-
cpe:2.3:a:librenms:librenms:1.22.01
-
cpe:2.3:a:librenms:librenms:1.23
-
cpe:2.3:a:librenms:librenms:1.24
-
cpe:2.3:a:librenms:librenms:1.25
-
cpe:2.3:a:librenms:librenms:1.26
-
cpe:2.3:a:librenms:librenms:1.27
-
cpe:2.3:a:librenms:librenms:1.28
-
cpe:2.3:a:librenms:librenms:1.29
-
cpe:2.3:a:librenms:librenms:1.30
-
cpe:2.3:a:librenms:librenms:1.30.01
-
cpe:2.3:a:librenms:librenms:1.31
-
cpe:2.3:a:librenms:librenms:1.31.01
-
cpe:2.3:a:librenms:librenms:1.31.02
-
cpe:2.3:a:librenms:librenms:1.31.03
-
cpe:2.3:a:librenms:librenms:1.32
-
cpe:2.3:a:librenms:librenms:1.32.01
-
cpe:2.3:a:librenms:librenms:1.33
-
cpe:2.3:a:librenms:librenms:1.33.01
-
cpe:2.3:a:librenms:librenms:1.34
-
cpe:2.3:a:librenms:librenms:1.35
-
cpe:2.3:a:librenms:librenms:1.36
-
cpe:2.3:a:librenms:librenms:1.36.01
-
cpe:2.3:a:librenms:librenms:1.37
-
cpe:2.3:a:librenms:librenms:1.38
-
cpe:2.3:a:librenms:librenms:1.39
-
cpe:2.3:a:librenms:librenms:1.40
-
cpe:2.3:a:librenms:librenms:1.41
-
cpe:2.3:a:librenms:librenms:1.42
-
cpe:2.3:a:librenms:librenms:1.42.01
-
cpe:2.3:a:librenms:librenms:1.43
-
cpe:2.3:a:librenms:librenms:1.44
-
cpe:2.3:a:librenms:librenms:1.45
-
cpe:2.3:a:librenms:librenms:1.46
-
cpe:2.3:a:librenms:librenms:1.47