Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-104304. PoCs published by Punt.
AI-analyzed exploit summary The exploit describes a SQL injection vulnerability in LibreNMS 1.46 and earlier, where the `mres()` function fails to properly sanitize user input due to a commented-out `mysqli_real_escape_string()` call. The PoC demonstrates triggering an SQL syntax error via the `search` parameter.
Description
LibreNMS 1.46 - 'search' SQL Injection
Exploits (1)
The exploit describes a SQL injection vulnerability in LibreNMS 1.46 and earlier, where the `mres()` function fails to properly sanitize user input due to a commented-out `mysqli_real_escape_string()` call. The PoC demonstrates triggering an SQL syntax error via the `search` parameter.