Lansweeper 6.0.0.63 Cross Site Scripting

============================================= - Release date: October 05th, 2017 - Discovered by: Giovanni Cerrato, Giovanni Guido and BackBox team - Severity: Medium ============================================= I. VULNERABILITY ------------------------- Lansweeper XSS vulnerability. II...

Lansweeper Cross-Site Scripting Vulnerability

Lansweeper is a network-assisted software that lists Windows hardware from Lansweeper Belgium. A cross-site scripting vulnerability exists in the image retrieval URI in versions of Lansweeper prior to 6.0.0.65. A remote attacker could exploit this vulnerability to inject arbitrary web script or...

CVE-2017-9292

Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782...

CVE-2017-9292

Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782...

Cross site scripting

Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782...

CVE-2017-9292

Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782...

CVE-2017-9292

Lansweeper before 6.0.0.65 contains a Cross‑Site Scripting (XSS) in the image retrieval URI (Bug 542782). Versions such as 6.0.0.63 and earlier are affected; exploitation involves an attacker crafting a request that, when issued by another user, causes attacker-provided JavaScript to run in that ...

CVE-2017-9292: Improper Neutralization of Input During Web Page Generation

Lansweeper before 6.0.0.65 has XSS in an image retrieval URI, aka Bug 542782...

PT-2017-18825

Name of the Vulnerable Software and Affected Versions Lansweeper versions prior to 6.0.0.65 Description The issue is related to an image retrieval URI. It involves a cross-site scripting XSS problem. Recommendations For versions prior to 6.0.0.65, update to version 6.0.0.65 or later to resolve th...

Lansweeper Credential Collector

Lansweeper stores the credentials it uses to scan the computers in its Microsoft SQL database. The passwords are XTea-encrypted with a 68 character long key, in which the first 8 characters are stored with the password in the database and the other 60 is static. Lansweeper, by default, creates an...

Microsoft SQL (MSSQL) Server Brute Force Logins With Default Credentials (TCP/IP Listener)

The remote Microsoft SQL MSSQL Server has a common / publicly known password for one or more accounts. SPDX-FileCopyrightText: 2005 HD Moore SPDX-FileCopyrightText: New / improved code since 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...