CVE-2019-16293

Open-AudIT is affected by CVE-2019-16293 for versions prior to 3.2.0. The issue arises in the Create Discoveries feature, allowing an authenticated attacker to execute arbitrary OS commands by injecting a crafted value into a URL field. The Red Hat advisory confirms the same description. The avai...

CVE-2019-16293

The Create Discoveries feature of Open-AudIT before 3.2.0 allows an authenticated attacker to execute arbitrary OS commands via a crafted value for a URL field...

CVE-2019-16293: Improper Neutralization of Special Elements used in an OS Command

The Create Discoveries feature of Open-AudIT before 3.2.0 allows an authenticated attacker to execute arbitrary OS commands via a crafted value for a URL field...

PT-2019-14614

Name of the Vulnerable Software and Affected Versions Open-AudIT versions prior to 3.2.0 Description The issue allows an authenticated attacker to execute arbitrary OS commands via a crafted value for a URL field in the Create Discoveries feature. Recommendations For versions prior to 3.2.0, upda...

Open-AudIT Professional Cross-Site Scripting Vulnerability (CNVD-2018-19866)

Open-AudIT is a network discovery and auditing program. The program intelligently scans networks and network devices and provides status reports. A cross-site scripting vulnerability exists in Orgs Page in Open-AudIT Professional Edition version 2.2.7. A remote attacker can exploit this...

CVE-2018-16607

Cross-site scripting XSS vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field...

CVE-2018-16607

Cross-site scripting XSS vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field...

Cross site scripting

Cross-site scripting XSS vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field...

CVE-2018-16607

Cross-site scripting XSS vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field...

CVE-2018-16607

Cross-site scripting XSS vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field...

CVE-2018-16607

Open-AudIT Professional Edition 2.2.7 contains a Cross-Site Scripting (XSS) vulnerability in the Orgs Page, exploitable via the Orgs name field. The issue allows remote attackers to inject arbitrary web script/HTML. Affected software is Open-AudIT Professional Edition (2.2.7); the root cause is r...

PT-2018-13646

Name of the Vulnerable Software and Affected Versions Open-AudIT Professional edition version 2.2.7 Description A cross-site scripting XSS issue exists in the Orgs Page, allowing remote attackers to inject arbitrary web script via the Orgs name field. This enables attackers to execute malicious...

CVE-2018-16607: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field...

Open-AudIT Community 2.2.6 - Cross-Site Scripting Vulnerability

Exploit for windows platform in category web applications Exploit Title: Open-AudIT Community 2.2.6 - Cross-Site Scripting Exploit Author: Ranjeet Jaiswal Vendor Homepage: https://opmantek.com/ Software Link:https://opmantek.com/network-tools-download/open-audit/ Affected Version: 2.2.6 Category:...

Open-AudIT Community 2.2.6 Cross Site Scripting

Exploit Title: Open-AudIT Community 2.2.6 - Cross-Site Scripting Google Dork:NA Exploit Date: 2018-08-01 Exploit Author: Ranjeet Jaiswal Vendor Homepage: https://opmantek.com/ Software Link:https://opmantek.com/network-tools-download/open-audit/ Affected Version: 2.2.6 Category: WebApps Tested on...

Open-AudIT Community 2.2.6 - Cross-Site Scripting

Open-AudIT Community 2.2.6 - Cross-Site Scripting Exploit Title: Open-AudIT Community 2.2.6 - Cross-Site Scripting Google Dork:NA Exploit Date: 2018-08-01 Exploit Author: Ranjeet Jaiswal Vendor Homepage: https://opmantek.com/ Software Link:https://opmantek.com/network-tools-download/open-audit/...

Open-AudIT Community 2.2.6 - Cross-Site Scripting

Exploit Title: Open-AudIT Community 2.2.6 - Cross-Site Scripting Google Dork:NA Exploit Date: 2018-08-01 Exploit Author: Ranjeet Jaiswal Vendor Homepage: https://opmantek.com/ Software Link:https://opmantek.com/network-tools-download/open-audit/ Affected Version: 2.2.6 Category: WebApps Tested on...

Open-AudIT Community 'Groups Page' Cross Site Scripting Vulnerability

Open-AudIT is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Open-Audit Cross-Site Scripting Vulnerability (CNVD-2018-14230)

Open-AudIT is a network discovery and auditing program. The program intelligently scans networks and network devices and provides status reports.Open-AudIT Community is its community version. A cross-site scripting vulnerability exists in the Groups page in Open-Audit Community version 2.2.6. A...

Cross site scripting

Cross-site scripting XSS vulnerability in the Groups Page in Open-Audit Community 2.2.6 allows remote attackers to inject arbitrary web script or HTML via the group name...