12 matches found
Knowage Suite 7.3 - Cross-Site Scripting Detection
Knowage Suite 7.3 contains an unauthenticated reflected cross-site scripting vulnerability. An attacker can inject arbitrary web script in '/servlet/AdapterHTTP' via the 'targetService' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Knowage Suite 7.""" from kittysploit import from...
CVE-2013-6231
SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script...
CVE-2021-30213
Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting XSS. An attacker can inject arbitrary web script in '/servlet/AdapterHTTP' via the 'targetService' parameter...
CVE-2021-30213
Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting XSS. An attacker can inject arbitrary web script in '/servlet/AdapterHTTP' via the 'targetService' parameter...
PT-2021-18667
Name of the Vulnerable Software and Affected Versions Knowage Suite version 7.3 Description The issue concerns unauthenticated reflected cross-site scripting XSS. An attacker can inject arbitrary web script in "/servlet/AdapterHTTP" via the targetService parameter. Recommendations For Knowage Sui...
CVE-2021-30213: Improper Neutralization of Input During Web Page Generation
Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting XSS. An attacker can inject arbitrary web script in '/servlet/AdapterHTTP' via the 'targetService' parameter...
Privilege escalation
SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script...
CVE-2013-6231
CVE-2013-6231 affects SpagoBI (primarily SpagoBI 4.0). The vulnerability is a privilege-escalation flaw in the AdapterHTTP servlet (ACTION_NAME=MANAGE_USER_ACTION) that can be triggered by crafted input, enabling a remote attacker to gain Administrator privileges after authenticating. Remediation...
CVE-2013-6231
SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script...
PT-2020-7540
Name of the Vulnerable Software and Affected Versions: SpagoBI versions prior to 4.1 Description: The issue is related to a privilege escalation error in the AdapterHTTP script. Recommendations: For versions prior to 4.1, update to version 4.1 or later to resolve the issue...
CVE-2013-6231: Improper Privilege Management
SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script...
SpagoBI远程权限提升漏洞
BUGTRAQ ID: 65925 CVECAN ID: CVE-2013-6231 SpagoBI是开源的商业智能软件包。 SpagoBI 4.0及其他版本的服务程序AdapterHTTP?ACTIONNAME=MANAGEUSERACTION由特制输入执行时会触发权限提升漏洞,该漏洞可使远程攻击者获取管理员权限。 0 SpagoBI SpagoBI 4.0 厂商补丁: SpagoBI ------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: www.spagoworld.org...