CVE-2020-22327

CVE-2020-22327 affects HFish 0.5.1. The issue is a stored/reflected-like XSS: when a payload is inserted in the name field, crafted content triggers XSS when an administrator views the information. Documents consistently describe the vulnerability as an XSS in the admin-view path without detailin...

CVE-2020-22481

An issue was discovered in HFish 0.5.1. When a payload is inserted where the password is entered, XSS code is triggered when the administrator views the information...

CVE-2020-22481

An issue was discovered in HFish 0.5.1. When a payload is inserted where the password is entered, XSS code is triggered when the administrator views the information...

Design/Logic Flaw

An issue was discovered in HFish 0.5.1. When a payload is inserted where the password is entered, XSS code is triggered when the administrator views the information...

CVE-2020-22481

An issue was discovered in HFish 0.5.1. When a payload is inserted where the password is entered, XSS code is triggered when the administrator views the information...

CVE-2020-22481

The CVE-2020-22481 entry concerns HFish 0.5.1 where injecting a payload at the password field triggers XSS when an administrator views the information. The connected sources confirm the product/version and the XSS impact, but do not provide additional exploit details, affected components, root ca...

Stored Cross-Site Scripting Vulnerability in HFish Honeypots

HFish honeypot is an extended enterprise security testing active induction open source honeypot framework system. HFish honeypot has a stored cross-site scripting vulnerability. Attackers can insert malicious js code in the page to obtain user cookies and other information , resulting in user...