CVE-2020-36947 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph endpoint that allows remote attackers to extract database inform…
High CVSS: 7.1

CVE-2020-36947

LibreNMS 1.46 contains an authenticated SQL injection vulnerability in the MAC accounting graph endpoint that allows remote attackers to extract database information. Attackers can exploit the vulnerability by manipulating the 'sort' parameter with crafted SQL injection techniques to retrieve sensitive database contents through time-based blind SQL injection.
Vendor
Librenms
Product
Librenms
CWE
CWE-89
Yayın Tarihi
2026-01-27 16:16:12
Güncelleme
2026-02-02 19:48:55
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-89 Librenms HIGH Librenms 2026

Referanslar

https://community.librenms.org/ https://github.com/librenms/librenms https://www.exploit-db.com/exploits/49246 https://www.librenms.org https://www.vulncheck.com/advisories/librenms-mac-accounting-graph-authenticated-sql-injection https://community.librenms.org/