Cross site scripting

CentOS Web Panel CWP 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action...

CVE-2019-10261

CentOS Web Panel CWP 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action...

CVE-2019-10261

CWP 0.9.8.789 is vulnerable to Stored/Persistent XSS in the DNS Functions → Edit Nameservers IPs form (Name Server 1/2). Root cause: insufficient input sanitization, enabling an attacker to store and render script payloads to other users. CVE-2019-10261 is described across multiple records with b...

Synology DiskStation Manager Cross-Site Scripting Vulnerability (CNVD-2019-08963)

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology Inc. of Taiwan, China. This operating system manages information such as data, files, photos, music, and more. A cross-site scripting vulnerability exists in the Control Panel SSO setting ...

CentOS Web Panel Cross-Site Scripting Vulnerability (CNVD-2019-14092)

CentOS Web Panel CWP is a free web hosting control panel. A cross-site scripting vulnerability exists in CentOS Web Panel version 0.9.8.78, which stems from a lack of proper validation of client-side data by the WEB application. An attacker can exploit the vulnerability to execute client-side cod...

CVE-2019-5890

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions...

Authentication flaw

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions...

CVE-2019-5890

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions...

Cross site scripting

Cross-site scripting XSS vulnerability in Control Panel SSO Settings in Synology DiskStation Manager DSM before 6.2.1-23824 allows remote authenticated users to inject arbitrary web script or HTML via the URL parameter...

CVE-2018-13293

Cross-site scripting XSS vulnerability in Control Panel SSO Settings in Synology DiskStation Manager DSM before 6.2.1-23824 allows remote authenticated users to inject arbitrary web script or HTML via the URL parameter...

CVE-2019-5890

Affected software: OverIT Geocall 6.3 (before build 2:346977). Vulnerability: Weak authentication and session management allow an authenticated user to access the Administrative control panel and execute administrative functions. Root cause (as described): Improper session handling enabling eleva...

CVE-2019-5890

An issue was discovered in OverIT Geocall 6.3 before build 2:346977. Weak authentication and session management allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions...

CVE-2018-13293

CVE-2018-13293 affects Synology DiskStation Manager (DSM) Control Panel SSO Settings prior to 6.2.1-23824. The vulnerability is a cross-site scripting (XSS) flaw that allows remote authenticated users to inject arbitrary web script or HTML via a URL parameter. Evidence across multiple sources con...

CVE-2018-13293

Cross-site scripting XSS vulnerability in Control Panel SSO Settings in Synology DiskStation Manager DSM before 6.2.1-23824 allows remote authenticated users to inject arbitrary web script or HTML via the URL parameter...

PT-2019-17848 · Overit · Overit Geocall

Name of the Vulnerable Software and Affected Versions: OverIT Geocall version 6.3 before build 2:346977 Description: An issue in OverIT Geocall allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions due to weak authentication and...

PT-2019-8958 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.1-23824 Description: A cross-site scripting XSS issue exists in the Control Panel SSO Settings of Synology DiskStation Manager DSM, allowing remote authenticated users to inject arbitrary...

CentOS Web Panel 0.9.8.789 Cross Site Scripting

Exploit Title: CentOS Web Panel 0.9.8.789 - NameServer Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 28 - March - 2019 Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software Link: http://centos-webpanel.com Version: 0.9.8.789 Tested on: CentOS 7 CVE :...

CentOS Web Panel 0.9.8.789 - NameServer Field Persistent Cross-Site Scripting

Exploit Title: CentOS Web Panel 0.9.8.789 - NameServer Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 28 - March - 2019 Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software Link: http://centos-webpanel.com Version: 0.9.8.789 Tested on: CentOS 7 CVE :...

CentOS Web Panel 0.9.8.789 - NameServer Field Persistent Cross-Site Scripting

CentOS Web Panel 0.9.8.789 - NameServer Field Persistent Cross-Site Scripting Exploit Title: CentOS Web Panel 0.9.8.789 - NameServer Field Stored Cross-Site Scripting Vulnerability Google Dork: N/A Date: 28 - March - 2019 Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software...

CentOS Web Panel 0.9.8.789 - NameServer Field Persistent Cross-Site Scripting Vulnerability

Exploit for linux platform in category web applications Exploit Title: CentOS Web Panel 0.9.8.789 - NameServer Field Stored Cross-Site Scripting Vulnerability Exploit Author: DKM Vendor Homepage: http://centos-webpanel.com Software Link: http://centos-webpanel.com Version: 0.9.8.789 Tested on:...