SolarWinds Serv-U FTP Server Cross-Site Scripting Vulnerability (CNVD-2019-46256)

SolarWinds Serv-U FTP Server is a set of U.S. SolarWinds FTP and MFT file transfer software. A cross-site scripting vulnerability exists in SolarWinds Serv-U FTP Server version 15.1.7. The vulnerability stems from a lack of proper validation of client data by the WEB application. An attacker coul...

PT-2019-15972

A cross-site scripting XSS vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934 and CVE-2019-13182...

CVE-2019-19829: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability exists in SolarWinds Serv-U FTP Server 15.1.7 in the email parameter, a different vulnerability than CVE-2018-19934 and CVE-2019-13182...

CVE-2019-13181

A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7...

CVE-2019-13182

A stored cross-site scripting XSS vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7...

CVE-2019-13181

A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7...

CVE-2019-13182

A stored cross-site scripting XSS vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7...

CVE-2019-13181

A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7...

Cross site scripting

A stored cross-site scripting XSS vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7...

Design/Logic Flaw

A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7...

CVE-2019-13182

A stored cross-site scripting XSS vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7...

CVE-2019-13182

CVE-2019-13182 affects SolarWinds Serv-U FTP Server 15.1.7 Web UI. It is a stored XSS in the web UI, exploitable by manipulating fields like the user’s Full Name or HTTP Login Title Text, potentially allowing injected JavaScript to execute in a victim’s browser when logging in or accessing the lo...

CVE-2019-13181

A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7...

CVE-2019-13181

CVE-2019-13181 affects SolarWinds Serv-U FTP Server v15.1.7 where the web UI allows CSV injection: table entries can contain a string that is evaluated by Excel as a DDE macro when exporting user data (privileged users can inject macros via description fields). The vulnerability stems from input ...

PT-2019-13172

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U FTP Server version 15.1.7 Description A CSV injection issue exists in the web UI. Recommendations For SolarWinds Serv-U FTP Server version 15.1.7, at the moment, there is no information about a newer version that contains a f...

PT-2019-13173

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U FTP Server version 15.1.7 Description A stored cross-site scripting XSS issue exists in the web UI. Recommendations For SolarWinds Serv-U FTP Server version 15.1.7, update to a version that fixes this issue. At the moment,...

CVE-2019-13182: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in the web UI of SolarWinds Serv-U FTP Server 15.1.7...

CVE-2019-13181: Improper Neutralization of Formula Elements in a CSV File

A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7...

SolarWinds Orion NPM OrionModuleEngine Remote Code Execution (CVE-2019-8917)

A remote code execution vulnerability exists in SolarWinds Orion NPM. This vulnerability is due to missing access controls in the InvokeActionMethod method. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

SolarWinds Kiwi Syslog Server 8.3.52 Unquoted Service Path

Exploit Title: SolarWinds Kiwi Syslog Server 8.3.52 - 'Kiwi Syslog Server' Unquoted Service Path Date: 2019-11-08 Exploit Author: Carlos A Garcia R Vendor Homepage: https://www.kiwisyslog.com/ Software Link: https://www.kiwisyslog.com/downloads Version: 8.3.52 Tested on: Windows XP Professional...