Adiscon LogAnalyzer <4.1.7 - Cross-Site Scripting

Adiscon LogAnalyzer before 4.1.7 contains a cross-site scripting vulnerability in the 'referer' parameter of the login.php file. id: CVE-2018-19877 info: name: Adiscon LogAnalyzer 4.1.7 - Cross-Site Scripting author: arafatansari severity: medium description: | Adiscon LogAnalyzer before 4.1.7...

CVE-2019-19877

An issue was discovered in B Industrial Automation APROL before R4.2 V7.08. An attacker can get access to sensitive information outside the working directory via Directory Traversal attacks against AprolSqlServer, a different vulnerability than CVE-2019-16357...

CVE-2019-19877

CVE-2019-19877 affects B&R Industrial Automation APROL before R4.2 V7.08. The issue is a Directory Traversal against AprolSqlServer that can allow an attacker to access sensitive information outside the working directory. The description explicitly states this is a vulnerability separate from CVE...

CVE-2020-19877

DBHcms v1.2.0 has a directory traversal vulnerability as there is no directory control function in directory /dbhcms/. A remote unauthenticated attacker can exploit this vulnerability to obtain server-sensitive information...

CVE-2020-19877

DBHcms v1.2.0 is affected by a directory traversal vulnerability due to lack of directory access control in the /dbhcms/ directory. A remote unauthenticated attacker can obtain server‑sensitive information through this flaw. Root cause: absence of directory traversal protection in the application...

Adiscon LogAnalyzer 4.1.7 - Cross-Site Scripting

Adiscon LogAnalyzer 4.1.7 - Cross-Site Scripting Exploit Title: Adiscon LogAnalyzer 4.1.7 - Cross-Site Scripting Date: 2018-12-05 Software Link: httpås://loganalyzer.adiscon.com/ https://github.com/rsyslog/loganalyzer Exploit Author: Gustavo Sorondo Contact: http://twitter.com/iampuky Website:...

Adiscon LogAnalyzer &lt; 4.1.7 - Cross-Site Scripting

Exploit Title: Adiscon LogAnalyzer 4.1.7 - Cross-Site Scripting Date: 2018-12-05 Software Link: httpås://loganalyzer.adiscon.com/ https://github.com/rsyslog/loganalyzer Exploit Author: Gustavo Sorondo Contact: http://twitter.com/iampuky Website: http://cintainfinita.com/ CVE: CVE-2018-19877...

Adiscon LogAnalyzer 4.1.7 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Adiscon LogAnalyzer 4.1.7 - Cross-Site Scripting Software Link: httpås://loganalyzer.adiscon.com/ https://github.com/rsyslog/loganalyzer Exploit Author: Gustavo Sorondo Contact: http://twitter.com/iampuky Website:...

Adiscon LogAnalyzer 4.1.6 Cross Site Scripting

Title: Cross-Site Scripting in Adiscon LogAnalyzer CVE-2018-19877 Credit: Gustavo Sorondo / http://www.cintainfinita.com Vendor/Product: Adiscon LogAnalyzer https://loganalyzer.adiscon.com/ https://github.com/rsyslog/loganalyzer Vulnerability: Cross-Site Scripting XSS Vulnerable version: 4.1.6 an...

CVE-2018-19877

CVE-2018-19877 affects Adiscon LogAnalyzer prior to 4.1.7. The vulnerability is a Cross-Site Scripting (XSS) in the login.php file, exploitable via the Login Button Referer field. The underlying issue is an XSS in the referer parameter of login.php, allowing execution of malicious scripts in the ...