60 matches found
CVE-2017-1000065
Multiple Cross-site scripting XSS vulnerabilities in rpc.php in OpenMediaVault release 2.1 in Access Rights ManagementUsers functionality allows attackers to inject arbitrary web scripts and execute malicious scripts within an authenticated client's browser...
Cross site scripting
Multiple Cross-site scripting XSS vulnerabilities in rpc.php in OpenMediaVault release 2.1 in Access Rights ManagementUsers functionality allows attackers to inject arbitrary web scripts and execute malicious scripts within an authenticated client's browser...
CVE-2017-1000065
Multiple Cross-site scripting XSS vulnerabilities in rpc.php in OpenMediaVault release 2.1 in Access Rights ManagementUsers functionality allows attackers to inject arbitrary web scripts and execute malicious scripts within an authenticated client's browser...
CVE-2017-1000065
CVE-2017-1000065 involves multiple cross-site scripting (XSS) vulnerabilities in the OpenMediaVault 2.1 rpc.php component (Access Rights Management/Users). The affected element is not explicitly enumerated beyond rpc.php in OpenMediaVault 2.1; the root cause is described as XSS allowing an attack...
CVE-2013-3632
The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter...
Command injection
The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter...
CVE-2013-3632
CVE-2013-3632 concerns OpenMediaVault’s rpc.php Cron service, where an authenticated user can schedule cron jobs as arbitrary users and execute commands via the username parameter. The connected sources confirm practical exploitation via Metasploit modules targeting OpenMediaVault, describing rem...
CVE-2013-3632
The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter...
CVE-2013-3632
The Cron service in rpc.php in OpenMediaVault allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter...
PT-2014-2692 · Openmediavault · Openmediavault
Name of the Vulnerable Software and Affected Versions: OpenMediaVault affected versions not specified Description: The issue allows remote authenticated users to execute cron jobs as arbitrary users and execute arbitrary commands via the username parameter in the Cron service in rpc.php...
OpenMediaVault Default Admin Credentials (HTTP)
The remote OpenMediaVault web interface is using known default credentials. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OpenMediaVault Cron Remote Command Execution
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::Tcp include...
OpenMediaVault Cron Remote Command Execution (CVE-2013-3632)
A security vulnerability was found in OpenMediaVault. OpenMediaVault allows an authenticated user to create cron jobs as arbitrary users on the system. An attacker can abuse this to run arbitrary commands as any user available on the system including root...
OpenMediaVault Web Detection
Binary data openmediavaultwebuidetect.nbin...
OpenMediaVault Default Administrator Credentials
The remote OpenMediaVault install uses a default set of credentials 'admin' / 'openmediavault' to control access to its management interface. With this information, an attacker could gain administrative access to the application. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
OpenMediaVault Cron Remote Command Execution Vulnerability
OpenMediaVault allows an authenticated user to create cron jobs as arbitrary users on the system. An attacker can abuse this to run arbitrary commands as any user available on the system including root. This module requires Metasploit: http//metasploit.com/download Current source:...
OpenMediaVault Cron - Remote Command Execution (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'OpenMediaVault Cron Remote Command Execution', 'Description' = %q OpenMediaVault allows an authenticated user to create cron jobs as...
OpenMediaVault Cron Remote Command Execution
OpenMediaVault allows an authenticated user to create cron jobs as arbitrary users on the system. An attacker can abuse this to run arbitrary commands as any user available on the system including root. This module requires Metasploit: https://metasploit.com/download Current source:...
OpenMediaVault rpc.php Authenticated Cron Remote Code Execution
OpenMediaVault allows an authenticated user to create cron jobs as root on the system. An attacker can abuse this by sending a POST request via rpc.php to schedule and execute a cron entry that runs arbitrary commands as root on the system. All OpenMediaVault versions including the latest release...
OpenMediaVault Cron Remote Command Execution
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'OpenMediaVault Cron Remote Command Execution', 'Description' = %q OpenMediaVault allows an authenticated user to create cron jobs as...