CVE-2016-10368

Open redirect vulnerability in Opsview Monitor Pro Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the back parameter to the...

Open redirect

Open redirect vulnerability in Opsview Monitor Pro Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the back parameter to the...

Directory traversal

In Opsview Monitor Pro Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request utilizing a simple URL encoding...

CVE-2016-10367

In Opsview Monitor Pro Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request utilizing a simple URL encoding...

CVE-2016-10367

In Opsview Monitor Pro Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request utilizing a simple URL encoding...

CVE-2016-10368

Open redirect vulnerability in Opsview Monitor Pro Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the back parameter to the...

CVE-2016-10367

In Opsview Monitor Pro Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request utilizing a simple URL encoding...

CVE-2016-10367

Opsview Monitor Pro is affected by CVE-2016-10367 due to an unauthenticated local file inclusion via a crafted HTTP GET request that bypasses the simple URL encoding (%252f instead of /). The Nuclei template confirms vulnerable versions: prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4....

CVE-2016-10368

Open redirect vulnerability in Opsview Monitor Pro Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the back parameter to the...

CVE-2016-10368

Opsview Monitor Pro is affected by an open redirect vulnerability (CVE-2016-10368) present in versions before 5.1.0.162300841, before 5.0.2.27475, before 4.6.4.162391051, and 4.5.x without a 2016 patch. The issue allows an attacker to redirect users to arbitrary websites by manipulating the back ...

CVE-2016-10367: Improper Limitation of a Pathname to a Restricted Directory

In Opsview Monitor Pro Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch, an unauthenticated Directory Traversal vulnerability can be exploited by issuing a specially crafted HTTP GET request utilizing a simple URL encoding...

CVE-2016-10368: URL Redirection to Untrusted Site

Open redirect vulnerability in Opsview Monitor Pro Prior to 5.1.0.162300841, prior to 5.0.2.27475, prior to 4.6.4.162391051, and 4.5.x without a certain 2016 security patch allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the back parameter to the...

Opsview cross-site scripting vulnerability (CNVD-2017-05202)

Opsview is a suite of enterprise-class network, server and application monitoring tools from Opsview UK. The tool can be integrated with monitoring systems such as NagiosCore and RRDTool. A cross-site scripting vulnerability exists in versions of Opsview prior to 2015-11-06. A remote attacker can...

CVE-2015-6035

Opsview before 2015-11-06 has XSS via SNMP...

Design/Logic Flaw

Opsview before 2015-11-06 has XSS via SNMP...

CVE-2015-6035

CVE-2015-6035 affects Opsview prior to 2015-11-06. Multiple connected sources confirm a cross-site scripting (XSS) vulnerability exploitable via the SNMP interface, enabling an attacker to injected arbitrary web script/HTML in the user’s browser. The CNVD entry reiterates remote exploitation via ...

CVE-2015-6035

Opsview before 2015-11-06 has XSS via SNMP...

CVE-2015-6035: Improper Neutralization of Input During Web Page Generation

Opsview before 2015-11-06 has XSS via SNMP...

Opsview Cross-Site Scripting Vulnerability

Opsview is a suite of enterprise-class network, server and application monitoring tools from Opsview UK. The tool can be integrated with monitoring systems such as Nagios Core and RRDTool. A cross-site scripting vulnerability exists in Opsview 4.6.2 and earlier versions. A remote attacker can...

Opsview Multiple XSS Vulnerabilities (Jun 2015)

Opsview is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...