Lucene search
K

7 matches found

OSV
OSV
added 2023/12/11 9:15 p.m.1 views

CVE-2023-49488

A cross-site scripting XSS vulnerability in Openfiler ESA v2.99.1 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the nic parameter...

6.1CVSS5.9AI score0.00105EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/12/11 12:0 a.m.1 views

Openfiler Security Vulnerability

Openfiler is provides an easy way to deploy and manage networked storage. A security vulnerability exists in Openfiler ESA version v2.99.1. An attacker can exploit this vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload into the nic parameter...

6.1CVSS6.8AI score0.00105EPSS
Exploits1References2
Prion
Prion
added 2014/09/30 4:55 p.m.11 views

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Openfiler 2.99.1 allow remote attackers to hijack the authentication of administrators for requests that 1 shutdown or 2 reboot the server via a request to admin/systemshutdown.html...

6.8CVSS7.7AI score0.00185EPSS
Exploits2References3Affected Software1
CVE
CVE
added 2014/09/30 4:0 p.m.41 views

CVE-2014-7190

Openfiler 2.99.1 is affected by multiple CSRF vulnerabilities that allow remote attackers to hijack administrator sessions and trigger shutdown or reboot via a request to admin/system_shutdown.html. The underlying issue is CSRF in the admin interface that permits state-changing actions without pr...

6.8CVSS7.4AI score0.00185EPSS
Exploits2References3Affected Software1
0day.today
0day.today
added 2014/09/29 12:0 a.m.24 views

OpenFiler 2.99.1 - CSRF Vulnerability

Exploit for php platform in category web applications DoS 0day.today 2018-03-28...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2014/09/29 12:0 a.m.27 views

OpenFiler 2.99.1 - Cross-Site Request Forgery

DoS...

7.4AI score
Exploits0
0day.today
0day.today
added 2014/05/09 12:0 a.m.24 views

Openfiler 2.99.1 Arbitrary Code Execution Vulnerability

Openfiler version 2.99.1 suffers from a remote arbitrary code execution vulnerability. Exploit Title: Arbitrary Code Execution in Openfiler Exploit author: Dolev Farhi @f1nhack Date 07/05/2014 Vendor homepage: http://www.openfiler.com Affected Software version: 2.99.1 Alerted vendor: 7.5.14...

7.9AI score
Exploits0
Rows per page
Query Builder