CVE-2020-15873

MEDIUM

LibreNMS < 1.65.1 - Authenticated SQL Injection via device_id POST Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2020-15873. PoCs published by limerencee.

AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2020-15873, a blind SQL injection vulnerability in LibreNMS versions prior to 1.65.1. The exploit uses time-based SQL injection to extract database information, including version details and user credentials.

Description

In LibreNMS before 1.65.1, an authenticated attacker can achieve SQL Injection via the customoid.inc.php device_id POST parameter to ajax_form.php.

Exploits (1)

nomisec WORKING POC

by limerencee · poc

https://github.com/limerencee/cs4239-cve-2020-15873

View Code ZIP pw:eip

This repository contains a functional proof-of-concept exploit for CVE-2020-15873, a blind SQL injection vulnerability in LibreNMS versions prior to 1.65.1. The exploit uses time-based SQL injection to extract database information, including version details and user credentials.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: LibreNMS < v1.65.1

Auth required

Prerequisites: Docker with LibreNMS container · Python2.7 with BeautifulSoup4 · Valid LibreNMS credentials · Device configured with host '127.0.0.1'

MITRE ATT&CK