Cross site scripting

PNP4Nagios through 81ebfc5 has stored XSS in the AJAX controller via the basket API and filters. This affects 0.6.26...

Cross site request forgery (csrf)

PNP4Nagios through 81ebfc5 lacks CSRF protection in the AJAX controller. This affects 0.6.26...

PNP4Nagios 跨站请求伪造漏洞

PNP4Nagios is a plugin for the PNP4Nagios project. A cross-site request forgery vulnerability exists in PNP4Nagios version 0.6.26 and earlier, which stems from a lack of CSRF protection in the AJAX controller...

CVE-2023-38349

PNP4Nagios (version 0.6.26 and earlier) is affected by a CSRF vulnerability in the AJAX controller due to missing protection. Several sources (including Red Hat, NVD, Ubuntu, OSV, CVE list, and related advisories) describe this as a cross-site request forgery issue in the PNP4Nagios performance a...

CVE-2023-38349

PNP4Nagios through 81ebfc5 lacks CSRF protection in the AJAX controller. This affects 0.6.26...

CVE-2023-38349

PNP4Nagios through 81ebfc5 lacks CSRF protection in the AJAX controller. This affects 0.6.26...

CVE-2023-38350

PNP4Nagios through 81ebfc5 has stored XSS in the AJAX controller via the basket API and filters. This affects 0.6.26...

PT-2023-3899 · Unknown · Pnp4Nagios

Name of the Vulnerable Software and Affected Versions: PNP4Nagios versions 0.6.26 and prior to version 81ebfc5 Description: The issue is related to a lack of CSRF protection in the AJAX controller of the PNP4Nagios performance analyzer, which is part of the Nagios network monitoring system. This...

PT-2023-3898 · Unknown · Pnp4Nagios

Name of the Vulnerable Software and Affected Versions: PNP4Nagios versions 0.6.26 through 81ebfc5 Description: The issue is related to stored XSS in the AJAX controller via the basket API and filters. This can be exploited by a remote attacker to perform cross-site scripting attacks. The...

YFCMF 安全漏洞

YFCMF is a software application. It provides a lightweight enterprise website management system. A security vulnerability exists in YFCMF before 3.0.4, which stems from unknown processing in app/admin/controller/Ajax.php that causes path traversal via the parameter controllername...

HackerOne: Denial of service in report view.

Hello Team! First of all thank you for acknowledging my feature request, I know it will help a lot of users. Description: ========== I just wanted to report a potential vulnerability on the report view functionality. For obvious reasons I'm using my sandboxed team on an alternate account to test...