Open-AudIT 2.1 - CSV Macro Injection Vulnerability

Exploit for windows platform in category web applications Exploit Title: Open-AudIT 2.1 - CSV Macro Injection Vulnerability Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://opmantek.com Software Link: https://www.open-audit.org/downloads.php Affected...

Open-AudIT 2.1 - CSV Macro Injection

Open-AudIT 2.1 - CSV Macro Injection Hi Guys, Exploit Title: Open-AudIT 2.1 - CSV Macro Injection Vulnerability Google Dork: N/A Date: 21-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://opmantek.com Software Link:...

Open-AudIT 2.1 - CSV Macro Injection

Hi Guys, Exploit Title: Open-AudIT 2.1 - CSV Macro Injection Vulnerability Google Dork: N/A Date: 21-04-2018 Exploit Author: Sureshbabu Narvaneni Author Blog : http://nullnews.in Vendor Homepage: https://opmantek.com Software Link: https://www.open-audit.org/downloads.php Affected Version: 2.1...

CVE-2018-9137

Open-AudIT before 2.2 has CSV Injection...

CVE-2018-9137

Open-AudIT before 2.2 has CSV Injection...

Design/Logic Flaw

Open-AudIT before 2.2 has CSV Injection...

CVE-2018-9137

Open-AudIT before 2.2 has CSV Injection...

CVE-2018-9137

Open-AudIT before 2.2 has CSV Injection...

CVE-2018-9137

Open-AudIT is vulnerable to CSV Injection in versions before 2.2 via the CSV export feature (CVE-2018-9137). The issue is documented across multiple sources as Open-AudIT 2.1 with CSV Macro Injection/Vulnerability. Impacted component: the CSV export path; underlying risk is injection that can lea...

Open-AudIT CSV Injection Vulnerability

Open-AudIT is a network discovery and auditing program. The program intelligently scans networks and network devices and provides status reports. A security vulnerability exists in the export function in versions prior to Open-AudIT 2.2. An attacker can exploit the vulnerability to inject Windows...

PT-2018-18881

Name of the Vulnerable Software and Affected Versions Open-AudIT versions prior to 2.2 Description The issue affects Open-AudIT, where a CSV injection is possible. Recommendations For versions prior to 2.2, update to version 2.2 or later to resolve the issue...

CVE-2018-9155

Cross-site scripting XSS vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin-Logs section with a logs?logs.type= URI and the Manage-Attributes section via the "Name display"...

Cross site scripting

Cross-site scripting XSS vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin-Logs section with a logs?logs.type= URI and the Manage-Attributes section via the "Name display"...

CVE-2018-9155

Cross-site scripting XSS vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin-Logs section with a logs?logs.type= URI and the Manage-Attributes section via the "Name display"...

CVE-2018-9155

Cross-site scripting XSS vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin-Logs section with a logs?logs.type= URI and the Manage-Attributes section via the "Name display"...

CVE-2018-9155

CVE-2018-9155 is an XSS in Open-AudIT Professional 2.1.1. A remote attacker can inject arbitrary script/HTML by a crafted Name (display) in attributes or by crafted log names in Admin->Logs, enabling scripted content in the UI. Connected sources confirm Open-AudIT Professional 2.1.1 as affecte...

CVE-2018-9155

Cross-site scripting XSS vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin-Logs section with a logs?logs.type= URI and the Manage-Attributes section via the "Name display"...

CVE-2018-9155

Cross-site scripting XSS vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin-Logs section with a logs?logs.type= URI and the Manage-Attributes section via the "Name display"...

PT-2018-18892

Name of the Vulnerable Software and Affected Versions Open-AudIT Professional version 2.1.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component. This is demonstrated in the Admin-Logs section with a...

CVE-2018-9155: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin-Logs section with a logs?logs.type= URI and the Manage-Attributes section via the "Name display"...