ANG Chin Guan, Melvin

1 exploit Active since Jul 2020
CVE-2020-15873 NOMISEC MEDIUM WORKING POC
LibreNMS < 1.65.1 - Authenticated SQL Injection via device_id POST Parameter
In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php.
CVSS 6.5