CVE-2018-19091

The CVE-2018-19091 entry concerns Tianti 2.3, where a reflected XSS vulnerability exists in the user management module. The issue is triggered via the tianti-module-admin/user/list userName parameter, enabling an attacker to inject scripts that may execute in a victim’s browser. The available con...

CVE-2014-2390

Cross-site request forgery CSRF vulnerability in the User Management module in McAfee Network Security Manager NSM before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for...