CWE Code: 74
Vulnerability Type: sql_injection
CVSS Score: 6.5
CWE Name:  Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Summary: an issue was discovered in librenms through 1.47. there is a command injection vulnerability in html/includes/graphs/device/collectd.inc.php where user supplied parameters are filtered with the mysqli_escape_real_string function. this function is not the appropriate function to sanitize command arguments as it does not escape a number of command line syntax characters such as ` (backtick), allowing an attacker to inject commands into the variable $rrd_cmd, which gets executed via passthru().
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-09-09
Last Modified Date: 2019-09-10