Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Moderate
CVE-2018-20434 - LibreNMS Addhost Command Injection
Disclosure Date: April 24, 2019 (last updated February 13, 2020)
LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the `$_POST['community']` parameter to `html/pages/addhost.inc.php` during creation of a new device, and then making a `/ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers html/includes/output/capture.inc.php` command mishandling.
0
Attacker Value
Unknown
CVE-2018-20434
Disclosure Date: April 24, 2019 (last updated November 27, 2024)
LibreNMS 1.46 allows remote attackers to execute arbitrary OS commands by using the $_POST['community'] parameter to html/pages/addhost.inc.php during creation of a new device, and then making a /ajax_output.php?id=capture&format=text&type=snmpwalk&hostname=localhost request that triggers html/includes/output/capture.inc.php command mishandling.
0
