Nagios Log Server 2.1.6 Cross Site Scripting

Exploit Title: Nagios Log Server 2.1.6 - Persistent Cross-Site Scripting Date: 2020-08-07 Vendor Homepage: https://www.nagios.com/products/nagios-log-server/ Vendor Changelog: https://www.nagios.com/downloads/nagios-log-server/change-log/ Exploit Author: Jinson Varghese Behanan @JinsonCyberSec...

Nagios Log Server 2.1.6 - Persistent Cross-Site Scripting

Exploit Title: Nagios Log Server 2.1.6 - Persistent Cross-Site Scripting Date: 2020-08-07 Vendor Homepage: https://www.nagios.com/products/nagios-log-server/ Vendor Changelog: https://www.nagios.com/downloads/nagios-log-server/change-log/ Exploit Author: Jinson Varghese Behanan @JinsonCyberSec...

rsg-log-server (>=0.0.2, <=0.0.3), rsg-metrics-server (>=0.0.1, <=0.0.10) +1 more potentially affected by CVE-2020-7714 via confucious (>=0.0.2, <=0.0.10)

confucious NPM version =0.0.2, =0.0.2, =0.0.1, =1.1.0, =1.6.0 Source cves: CVE-2020-7714 Source advisory: SNYK:JS-CONFUCIOUS-598665...

Nagios Log Server Cross-Site Scripting Vulnerability (CNVD-2020-43761)

Nagios Log Server is a set of centralized log management, monitoring and analysis software from Nagios, Inc. A cross-site scripting vulnerability exists in Nagios Log Server versions prior to 2.1.7. The vulnerability stems from the lack of proper validation of client-side data by the WEB...

CVE-2020-16157

A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods - Email Users menu...

CVE-2020-16157

A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods - Email Users menu...

Cross site scripting

A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods - Email Users menu...

CVE-2020-16157

A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods - Email Users menu...

CVE-2020-16157

Nagios Log Server (versions prior to 2.1.7) contains a Stored XSS vulnerability exploitable via the Notification Methods → Email Users menu. The root cause is insufficient input validation in the web application, allowing injected scripts to be stored and later executed in the admin/user context....

CVE-2020-16157

A Stored XSS vulnerability exists in Nagios Log Server before 2.1.7 via the Notification Methods - Email Users menu...

PT-2020-14779 · Nagios · Nagios Log Server

Name of the Vulnerable Software and Affected Versions: Nagios Log Server versions prior to 2.1.7 Description: A Stored XSS issue exists via the Notification Methods - Email Users menu. Recommendations: For versions prior to 2.1.7, update to version 2.1.7 or later to resolve the issue...

Nagios Log Server Cross-Site Scripting (CVE-2020-6586)

A stored cross-site scripting vulnerability exists in Nagios Log Server. This vulnerability is due to insufficient validation of user profile information in the user profile page...

Nagios Log Server Incorrect Access Control Vulnerability

Nagios Log Server is a powerful enterprise-grade log monitoring and management application that allows organizations to quickly and easily view, sort, and configure logs from any source on any given network. An incorrect access control vulnerability exists in Nagios Log Server 2.1.3. An attacker...

Nagios Log Server Cross-Site Scripting Vulnerability (CNVD-2020-17470)

Nagios Log Server is a powerful enterprise-grade log monitoring and management application that allows organizations to quickly and easily view, sort, and configure logs from any source on any given network. A cross-site scripting vulnerability exists in Nagios Log Server 2.1.3. An attacker can...

Nagios Log Server Cross-Site Request Forgery Vulnerability

Nagios Log Server is a powerful enterprise-grade log monitoring and management application that allows organizations to quickly and easily view, sort, and configure logs from any source on any given network. A cross-site request forgery vulnerability exists in Nagios Log Server 2.1.3. An attacker...

CVE-2020-6584

Nagios Log Server 2.1.3 has Incorrect Access Control...

CVE-2020-6584

Nagios Log Server 2.1.3 has Incorrect Access Control...

CVE-2020-6585

Nagios Log Server 2.1.3 has CSRF...

CVE-2020-6586

Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page. Any malicious user with limited access can store an XSS payload in his Name. When any admin views this, the XSS is triggered...

CVE-2020-6586

Nagios Log Server 2.1.3 allows XSS by visiting /profile and entering a crafted name field that is mishandled on the /admin/users page. Any malicious user with limited access can store an XSS payload in his Name. When any admin views this, the XSS is triggered...