CVE-2024-32461

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A SQL injection vulnerability in POST /search/search=packages in LibreNMS prior to version 24.4.0 allows a user with global read privileges to execute SQL commands via the package parameter. With this vulnerability, an attacker can exploit a SQL injection time based vulnerability to extract all data from the database, such as administrator credentials. Version 24.4.0 contains a patch for the vulnerability.

• CWE-89
• CWE-89

• https://doc.clickup.com/9013166444/p/h/8ckm0bc-53/16811991bb5fff6Exploit
• https://github.com/librenms/librenms/commit/d29201fce134347f891102699fbde7070debee33Patch
• https://github.com/librenms/librenms/security/advisories/GHSA-cwx6-cx7x-4q34Exploit, Vendor Advisory
• https://doc.clickup.com/9013166444/p/h/8ckm0bc-53/16811991bb5fff6Exploit
• https://github.com/librenms/librenms/commit/d29201fce134347f891102699fbde7070debee33Patch
• https://github.com/librenms/librenms/security/advisories/GHSA-cwx6-cx7x-4q34Exploit, Vendor Advisory

Published

Apr 22, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-32456Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2024-32457Improper Neutralization of Input During Web Page Generation …6.5
• CVE-2024-32458FreeRDP is a free implementation of the Remote Desktop Proto…9.8
• CVE-2024-32459FreeRDP is a free implementation of the Remote Desktop Proto…9.8
• CVE-2024-3246The LiteSpeed Cache plugin for WordPress is vulnerable to Cr…5.4
• CVE-2024-32460FreeRDP is a free implementation of the Remote Desktop Proto…9.8
• CVE-2024-32462Flatpak is a system for building, distributing, and running …8.4
• CVE-2024-32463phlex is an open source framework for building object-orient…7.1
• CVE-2024-32464Action Text brings rich text content and editing to Rails. I…6.1
• CVE-2024-32465Git is a revision control system. The Git project recommends…7.8
• CVE-2024-32466Tolgee is an open-source localization platform. For the `/v2…4.3
• CVE-2024-32467MeterSphere is an open source continuous testing platform. P…6.5