Lucene search
+L

4 matches found

Circl
Circl
added 2024/01/09 4:40 p.m.12 views

CVE-2023-41789

creationtimestamp| type| source ---|---|--- 2024-01-09 16:40:06+00:00| seen| https://t.me/truesecator/5271...

7.6CVSS6.1AI score0.00457EPSS
SaveExploits0References1
NVD
NVD
added 2023/11/23 3:15 p.m.15 views

CVE-2023-41789

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allows an attacker to perform cookie hijacking and log in as that user without the need for credentials. This issue affects...

7.6CVSS0.00457EPSS
SaveExploits0References1
CVE
CVE
added 2023/11/23 2:36 p.m.49 views

CVE-2023-41789

The CVE-2023-41789 issue is an XSS vulnerability in Pandora FMS (versions 700–773) caused by improper input neutralization during web page generation. This enables cookie hijacking and an unauthenticated user session takeover. Connected sources show multiple third-party assessments (PT Security/N...

7.6CVSS6.1AI score0.00457EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/23 2:36 p.m.39 views

CVE-2023-41789 Unauthenticated Admin Account Takeover Via XSS

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pandora FMS on all allows Cross-Site Scripting XSS. This vulnerability allows an attacker to perform cookie hijacking and log in as that user without the need for credentials. This issue affects...

7.6CVSS7.2AI score0.00457EPSS
SaveExploits0References1
Rows per page
Query Builder