159 matches found
CVE-2023-20040
A vulnerability in the NETCONF service of Cisco Network Services Orchestrator NSO could allow an authenticated, remote attacker to cause a denial of service DoS on an affected system that is running as the root user. To exploit this vulnerability, the attacker must be a member of the admin group...
CVE-2023-20040
A vulnerability in the NETCONF service of Cisco Network Services Orchestrator NSO could allow an authenticated, remote attacker to cause a denial of service DoS on an affected system that is running as the root user. To exploit this vulnerability, the attacker must be a member of the admin group...
Cisco Network Services Orchestrator Path Traversal Vulnerability
A vulnerability in the RESTCONF and NETCONF services of Cisco Network Services Orchestrator NSO could allow an authenticated, remote attacker to cause a denial of service DoS on an affected system that is running as the root user. To exploit this vulnerability, the attacker must be a member of th...
CVE-2022-25630
An authenticated user can embed malicious content with XSS into the admin group policy page...
CVE-2022-25630
An authenticated user can embed malicious content with XSS into the admin group policy page...
Code injection
An authenticated user can embed malicious content with XSS into the admin group policy page...
CVE-2022-25630
An authenticated user can embed malicious content with XSS into the admin group policy page...
CVE-2022-25630
Broadcom Symantec Messaging Gateway is affected by CVE-2022-25630, a stored XSS vulnerability exploitable by an authenticated user on the admin group policy page. Public details describe an authenticated user injecting payloads via the AdminGroupPolicyFlow$save.flo endpoint, with the issue enabli...
CVE-2022-25630
An authenticated user can embed malicious content with XSS into the admin group policy page...
PT-2022-24946 · Xwiki · Xwiki Oidc
Name of the Vulnerable Software and Affected Versions: XWiki OIDC versions prior to 1.29.1 Description: The issue allows an attacker to bypass XWiki authentication by specifying their own OpenID provider through request parameters, such as oidc.endpoint., or by using an XWiki-based OpenID provide...
PT-2022-5183 · Bifrost · Bifrost
Name of the Vulnerable Software and Affected Versions: Bifrost versions prior to 1.8.8-release Description: The issue is related to authentication bypass in the admin and monitor user groups. This can be achieved by deleting the X-Requested-With: XMLHttpRequest field in the request header. There...
The vulnerability of the /admin/group/list/ component of the TrueConf Server allows a perpetrator to carry out cross-site scripting attacks.
The vulnerability of the /admin/group/list/ component of the TrueConf Server relates to the failure to remove script-related HTML tags from web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
CVE-2017-20117
A vulnerability was found in TrueConf Server 4.3.7. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/group. The manipulation leads to basic cross site scripting DOM. The attack can be launched remotely. The exploit has been disclos...
CVE-2017-20116
A vulnerability was found in TrueConf Server 4.3.7. It has been classified as problematic. Affected is an unknown function of the file /admin/group/list/. The manipulation of the argument checkedgroupid leads to basic cross site scripting Reflected. It is possible to launch the attack remotely. T...
PT-2022-7986 · Trueconf · Trueconf Server
Name of the Vulnerable Software and Affected Versions: TrueConf Server version 4.3.7 Description: A vulnerability was found in an unknown functionality of the file /admin/group, leading to basic cross site scripting DOM. The attack can be launched remotely. The exploit has been disclosed to the...
CVE-2021-46444
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admingroupedit&agID...
CVE-2021-46444
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admingroupedit&agID...
H.H.G. Multistore SQL注入漏洞
H.H.G. Multistore is a software designed to manage multiple stores from the German company H.H.G. Multistore. A security vulnerability exists in H.H.G. Multistore v5.1.0 and below that allows an attacker to perform SQL injection via /admin/admin.php?module=admingroupedit&agID...
phpGACL SQL注入漏洞
phpGACL is an open source PHP class for Web developers to provide a simple but powerful "insert" permission system . For its current Web-based applications to use . Phpgacl version 3.3.7 SQL injection vulnerability , the vulnerability stems from the program admin/edit group.php page SQL injection...
