PT-2023-21513

Name of the Vulnerable Software and Affected Versions SupportCandy WordPress plugin versions prior to 3.1.7 Description The issue arises from the improper sanitization and escaping of the agents parameter in the set add agent leaves AJAX function, which is then used in a SQL statement. This leads...

CVE-2020-27990

Nagios XI before 5.7.5 is vulnerable to a Cross‑Site Scripting (XSS) vulnerability in the Deployment tool (Add Agent/Proxy). The issue affects Nagios XI deployments prior to 5.7.5 and is described across multiple sources (CVE-2020-27990; CNVD-2020-63972). Root cause and exact exploit details are ...

PT-2020-16893

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 5.7.5 Description The issue concerns a Cross-Site Scripting XSS vulnerability in the Deployment tool, specifically in the 'add agent' functionality. This type of vulnerability allows an attacker to inject malicious...

CVE-2012-4280

Multiple cross-site request forgery CSRF vulnerabilities in admin/agenteditor.php in Free Realty 3.1-0.6 allow remote attackers to hijack the authentication of administrators for requests that 1 add an agent via an addagent action or 2 modify an agent...

CVE-2012-4280: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in admin/agenteditor.php in Free Realty 3.1-0.6 allow remote attackers to hijack the authentication of administrators for requests that 1 add an agent via an addagent action or 2 modify an agent...