CVE-2024-51026_Overview

CVE-2024-51026 - NetAdmin IAM의 사이트 간 스크립팅XSS 취약점 설명 NetAdmin IAM 시스템버전 4.0.30319은 /BalloonSave.ashx 엔드포인트에서 사이트 간 스크립팅XSS 취약점을 나타내며, Content= 필드에 악성 페이로드를 주입할 수 있습니다. 인증된 모든 사용자는 이 취약점을 악용하여 설명된 엔드포인트 내 요청의 "Content" 필드에 스크립트를 삽입할 수 있습니다. 이 스크립트는 취약한 페이지가 새로고침될 때마다 실행됩니다. 취약점 세부 사항 유형 : 사이트 간...

Exploit-CVE-2024-9513-NetAdmin-IAM-Allows-User-Enumeration-In-Active-Directory

Exploit Title: CVE-2024-9513 - NetAdmin IAM позволяет перечисление пользователей в Active Directory Дата: 2024-10-04 Автор эксплойта: Elizeu Das Dores ELIZEUOPAIN Домашняя страница вендора: https://netadmin.software/ Версия: 3.5 Протестировано на: 2024-10-05 CVE : CVE-2024-9513 Ссылки:...

CVE-2024-9513

A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /controller/api/Answer/ReturnUserQuestionsFilled of the component HTTP POST Request Handler. The manipulation of the argument...

CVE-2024-51026

The NetAdmin IAM system version 4.0.30319 has a Cross Site Scripting XSS vulnerability in the /BalloonSave.ashx endpoint, where it is possible to inject a malicious payload into the Content= field...

Exploit for Observable Discrepancy in Netadmin Netadmin_Iam

Exploit Title: CVE-2024-9513 - NetAdmin IAM Allows User Enumer...

Exploit for Observable Discrepancy in Netadmin Netadmin_Iam

Exploit Title: CVE-2024-9513 - NetAdmin IAM Allows User Enumer...

NetAdmin IAM 安全漏洞

NetAdmin IAM is an application from NetAdmin, Inc. A security vulnerability exists in NetAdmin IAM version 4.0.30319 that stems from a cross-site scripting XSS vulnerability in the /BalloonSave.ashx endpoint...

PT-2024-34493 · Unknown · Netadmin Iam System

Name of the Vulnerable Software and Affected Versions: NetAdmin IAM system version 4.0.30319 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It affects the "/BalloonSave.ashx" endpoint, where a malicious payload can be injected into the Content field. Recommendations: Fo...

CVE-2024-9513

A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /controller/api/Answer/ReturnUserQuestionsFilled of the component HTTP POST Request Handler. The manipulation of the argument...

CVE-2024-9513 Netadmin Software NetAdmin IAM HTTP POST Request ReturnUserQuestionsFilled information exposure

A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /controller/api/Answer/ReturnUserQuestionsFilled of the component HTTP POST Request Handler. The manipulation of the argument...

CVE-2024-9513 Netadmin Software NetAdmin IAM HTTP POST Request ReturnUserQuestionsFilled information exposure

A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /controller/api/Answer/ReturnUserQuestionsFilled of the component HTTP POST Request Handler. The manipulation of the argument...

CVE-2024-9513

NetAdmin IAM (Netadmin Software) up to version 3.5 has a vulnerability in the HTTP POST Request Handler at /controller/api/Answer/ReturnUserQuestionsFilled. The issue arises from improper manipulation of the username parameter, causing information exposure via discrepancy. Impact is limited to co...