29 matches found
CVE-2023-32790 XSS on NXLog Manager
Cross-Site Scripting XSS vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to inject a malicious JavaScript payload into the 'Full Name' field during a user edit, due to improper sanitization of the input parameter...
CVE-2023-32790
NXLog Manager 5.6.5633 contains a Cross-Site Scripting (XSS) vulnerability where an attacker can inject JavaScript into the Full Name field during user edits due to improper input sanitization. The issue is documented across multiple sources (NVD/CVE-2023-32790) with the core detail that exploita...
CVE-2023-32790 XSS on NXLog Manager
Cross-Site Scripting XSS vulnerability in NXLog Manager 5.6.5633 version. This vulnerability allows an attacker to inject a malicious JavaScript payload into the 'Full Name' field during a user edit, due to improper sanitization of the input parameter...
NXLog Cross-Site Scripting Vulnerability
Nxlog is a log collection and centralization software from Nxlog, Inc. that supports multiple operating systems. A cross-site scripting vulnerability exists in NXLog Manager version 5.6.5633, which arises from improper cleaning of input parameters and allows an attacker to inject a malicious...
PT-2023-24026 · Nxlog · Nxlog Manager
Name of the Vulnerable Software and Affected Versions: NXLog Manager version 5.6.5633 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows an attacker to eliminate roles within the platform by sending a specifically crafted query to the server. This is due to the...
Nxlog 跨站请求伪造漏洞
NXLog Manager is a solution that can be used from a browser to easily manage and monitor a large number of NXLog Enterprise instances. NXLog Manager suffers from a cross-site request forgery vulnerability that can be exploited by a remote attacker to submit a specially crafted malicious request...
PT-2023-24024 · Nxlog · Nxlog Manager
Name of the Vulnerable Software and Affected Versions: NXLog Manager version 5.6.5633 Description: A Cross-Site Scripting XSS issue allows an attacker to inject malicious JavaScript into the Full Name field during user edit, due to improper sanitization of the input parameter. This enables the...
PT-2023-24025 · Nxlog · Nxlog Manager
Name of the Vulnerable Software and Affected Versions: NXLog Manager version 5.6.5633 Description: A Cross-Site Request Forgery CSRF issue allows an attacker to manipulate and delete user accounts within the platform by sending a specifically crafted query to the server. This is due to the lack o...
Nxlog 跨站请求伪造漏洞
NXLog Manager is a solution that can be used from a browser to easily manage and monitor a large number of NXLog Enterprise instances. NXLog Manager suffers from a cross-site request forgery vulnerability that can be exploited by a remote attacker to submit a specially crafted malicious request...