107 matches found
DEBIAN-CVE-2018-1000528
GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting XSS vulnerability in change password form html/password.php, 308 that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open ...
Cross site scripting
GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting XSS vulnerability in change password form html/password.php, 308 that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open ...
CVE-2018-1000528
GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting XSS vulnerability in change password form html/password.php, 308 that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open ...
UBUNTU-CVE-2018-1000528
GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting XSS vulnerability in change password form html/password.php, 308 that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open ...
CVE-2018-1000528
GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting XSS vulnerability in change password form html/password.php, 308 that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open ...
CVE-2018-1000528
GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting XSS vulnerability in change password form html/password.php, 308 that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open ...
CVE-2018-1000528
CVE-2018-1000528 affects GONICUS GOsa prior to commit 56070d6289d47ba3f5918885954dcceb75606001. The XSS flaw is in the change password form (html/password.php, #308), allowing injection of arbitrary script/HTML when a user views a specially crafted page. Attack requires victim interaction (openin...
CVE-2018-1000528
GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting XSS vulnerability in change password form html/password.php, 308 that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open ...
CVE-2018-1000528: Improper Neutralization of Input During Web Page Generation
GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting XSS vulnerability in change password form html/password.php, 308 that can result in injection of arbitrary web script or HTML. This attack appear to be exploitable via the victim must open ...
PT-2018-9425
Name of the Vulnerable Software and Affected Versions GONICUS GOsa versions before commit 56070d6289d47ba3f5918885954dcceb75606001 Description The issue concerns a Cross Site Scripting XSS vulnerability in the change password form, specifically in the html/password.php file. This vulnerability ca...
GOsa Arbitrary Command Execution Vulnerability
GOsa is a set of LDAP front-end tools for managing users. A security vulnerability exists in the 'generatesmbnthash' function in the include/functions.inc file in GOsa. A remote attacker can exploit this vulnerability to execute arbitrary commands with the help of a specially crafted password...
GOsa Cross-Site Scripting Vulnerability
GOsa is a set of LDAP front-end tools for managing users. A cross-site scripting vulnerability exists in the 'displayLogin' function of the html/index.php file in GOsa. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of a username...
CVE-2015-8771
The generatesmbnthash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted password...
CVE-2015-8771
The generatesmbnthash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted password...
DEBIAN-CVE-2015-8771
The generatesmbnthash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted password...
UBUNTU-CVE-2015-8771
The generatesmbnthash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted password...
DEBIAN-CVE-2014-9760
Cross-site scripting XSS vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username...
CVE-2014-9760
Cross-site scripting XSS vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username...