CVE-2018-18552

ServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service menu functionality loss by creating an LNK file that points to a second LNK file, if this second LNK file is associated with a Start menu. Ultimately, this behavior comes from a Directory Traversal bug...

Cross site scripting

ServersCheck Monitoring Software through 14.3.3 has Persistent and Reflected XSS via the sensors.html status parameter, sensors.html type parameter, sensors.html device parameter, report.html location parameter, groupdelete.html group parameter, reportsave.html query parameter, sensors.html...

Directory traversal

ServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service menu functionality loss by creating an LNK file that points to a second LNK file, if this second LNK file is associated with a Start menu. Ultimately, this behavior comes from a Directory Traversal bug...

CVE-2018-18552

CVE-2018-18552 affects ServersCheck Monitoring Software up to version 14.3.3. The vulnerability is a Directory Traversal flaw via the sensor_details.html id parameter, enabling an attacker with local access to cause a denial of service (menu functionality loss) by creating empty files in arbitrar...

CVE-2018-18551

The CVE-2018-18551 entry concerns ServersCheck Monitoring Software (through version 14.3.3). The vulnerability is a combination of Persistent and Reflected Cross-Site Scripting (XSS) affecting multiple endpoints and parameters (e.g., sensors.html status/type/device, report.html location, group_de...

CVE-2018-18552

ServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service menu functionality loss by creating an LNK file that points to a second LNK file, if this second LNK file is associated with a Start menu. Ultimately, this behavior comes from a Directory Traversal bug...

CVE-2018-18551

ServersCheck Monitoring Software through 14.3.3 has Persistent and Reflected XSS via the sensors.html status parameter, sensors.html type parameter, sensors.html device parameter, report.html location parameter, groupdelete.html group parameter, reportsave.html query parameter, sensors.html...

PT-2018-14511

Name of the Vulnerable Software and Affected Versions ServersCheck Monitoring Software versions prior to 14.3.4 Description The issue allows local users to cause a denial of service, resulting in menu functionality loss. This is achieved by creating an LNK file that points to a second LNK file...

CVE-2018-18551: Improper Neutralization of Input During Web Page Generation

ServersCheck Monitoring Software through 14.3.3 has Persistent and Reflected XSS via the sensors.html status parameter, sensors.html type parameter, sensors.html device parameter, report.html location parameter, groupdelete.html group parameter, reportsave.html query parameter, sensors.html...

PT-2018-14510

Name of the Vulnerable Software and Affected Versions ServersCheck Monitoring Software versions prior to 14.3.4 Description The issue concerns the presence of Persistent and Reflected XSS in the software. This can be exploited via several parameters, including status, type, device, location, grou...

CVE-2018-18552: Improper Limitation of a Pathname to a Restricted Directory

ServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service menu functionality loss by creating an LNK file that points to a second LNK file, if this second LNK file is associated with a Start menu. Ultimately, this behavior comes from a Directory Traversal bug...

ServersCheck Monitoring Software 14.3.3 - Arbitrary File Write

ServersCheck Monitoring Software 14.3.3 - Arbitrary File Write Exploit Title: ServersCheck Monitoring Software 14.3.3 - Denial of Service PoC Author: John Page aka hyp3rlinx Date: 2018-10-23 Vendor: www.serverscheck.com Software Link: http://downloads.serverscheck.com/monitoringsoftware/setup.exe...

ServersCheck Monitoring Software 14.3.3 - Denial of Service Exploit

Exploit for windows platform in category dos / poc Exploit Title: ServersCheck Monitoring Software 14.3.3 - Denial of Service PoC Author: John Page aka hyp3rlinx Vendor: www.serverscheck.com Software Link: http://downloads.serverscheck.com/monitoringsoftware/setup.exe CVE: N/A References:...

ServersCheck Monitoring Software 14.3.3 - id SQL Injection

ServersCheck Monitoring Software 14.3.3 - id SQL Injection Exploit Title: ServersCheck Monitoring Software 14.3.3 - 'id' SQL Injection Author: John Page aka hyp3rlinx Date: 2018-10-23 Vendor: www.serverscheck.com Software link: http://downloads.serverscheck.com/monitoringsoftware/setup.exe CVE: N...

ServersCheck Monitoring Software 14.3.3 - 'id' SQL Injection

Exploit Title: ServersCheck Monitoring Software 14.3.3 - 'id' SQL Injection Author: John Page aka hyp3rlinx Date: 2018-10-23 Vendor: www.serverscheck.com Software link: http://downloads.serverscheck.com/monitoringsoftware/setup.exe CVE: N/A References:...

Sql injection

ServersCheck Monitoring Software before 14.3.4 allows SQL Injection by an authenticated user...

CVE-2018-18550

CVE-2018-18550 affects ServersCheck Monitoring Software up to and including version 14.3.3; it allows SQL Injection by an authenticated user via the alerts.html “id” parameter. The root cause is improper handling/sanitization of the ID parameter in the web interface, enabling crafted input to alt...

CVE-2018-18550

ServersCheck Monitoring Software before 14.3.4 allows SQL Injection by an authenticated user...

CVE-2018-18550: Improper Neutralization of Special Elements used in an SQL Command

ServersCheck Monitoring Software before 14.3.4 allows SQL Injection by an authenticated user...

PT-2018-14509

Name of the Vulnerable Software and Affected Versions ServersCheck Monitoring Software versions prior to 14.3.4 Description The issue allows SQL Injection to be performed by an authenticated user. Recommendations For versions prior to 14.3.4, update to version 14.3.4 or later to resolve the issue...