CVE-2018-18625

Grafana 5.3.1 has XSS via a link on the "Dashboard All Panels General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...

CVE-2018-18625

Grafana 5.3.1 is affected by an XSS vulnerability via a link on the Dashboard > All Panels > General screen. The issue stems from an incomplete fix for CVE-2018-12099. The connected sources confirm the exact vector (dashboard link) and affected UI screen, but do not provide a remediation ve...

CVE-2018-18625

Grafana 5.3.1 has XSS via a link on the "Dashboard All Panels General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...

CVE-2018-18624

Grafana 5.3.1 has XSS via a column style on the "Dashboard Table Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...

CVE-2018-18624

Grafana 5.3.1 is affected by an XSS in the Dashboard > Table Panel (column style). This CVE-2018-18624 entry notes the issue exists due to an incomplete fix for CVE-2018-12099. Connected sources confirm this specific vector (XSS via column style) and link it to Grafana 5.3.1; no additional det...

CVE-2018-18624

Grafana 5.3.1 has XSS via a column style on the "Dashboard Table Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...

CVE-2018-18623

Grafana 5.3.1 has XSS via the "Dashboard Text Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...

CVE-2018-18623

Affected software: Grafana 5.3.1. Vulnerable surface: Dashboard UI panels (Text Panel, and related dashboard elements such as All Panels/General and Table Panel) where XSS can occur. Root cause: an incomplete fix for CVE-2018-12099 led to another XSS condition (CVE-2018-18623). Impact: cross-site...

CVE-2018-18623

Grafana 5.3.1 has XSS via the "Dashboard Text Panel" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...

CVE-2018-18625: Improper Neutralization of Input During Web Page Generation

Grafana 5.3.1 has XSS via a link on the "Dashboard All Panels General" screen. NOTE: this issue exists because of an incomplete fix for CVE-2018-12099...

PT-2020-8638

Name of the Vulnerable Software and Affected Versions: Grafana versions prior to 7.0.0 Grafana version 5.3.1 Description: The issue is related to a XSS vulnerability via a column style on the "Dashboard Table Panel" screen. This problem exists due to an incomplete fix for a previous issue...

PT-2020-8639

Name of the Vulnerable Software and Affected Versions: Grafana version 5.3.1 Description: The issue is related to an incomplete fix, resulting in a cross-site scripting XSS vulnerability. This can be exploited via a link on the "Dashboard All Panels General" screen or by adding a link in the...

PT-2020-8637 · Grafana · Grafana

Name of the Vulnerable Software and Affected Versions: Grafana version 5.3.1 Description: The issue is related to an incomplete fix, resulting in a XSS vulnerability via the "Dashboard Text Panel" screen. This allows for potential exploitation. Recommendations: For Grafana version 5.3.1, consider...

CVE-2020-8816

Pi-hole Web v4.3.2 aka AdminLTE allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease...

CVE-2020-8816: Improper Neutralization of Special Elements used in an OS Command

Pi-hole Web v4.3.2 aka AdminLTE allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease...

WordPress: Authenticated Stored Cross-site Scripting in bbPress

Description: There exists a stored XSS vulnerability in bbPress, due to which the XSS payload which I enter in my content, gets executed at /wp-admin/edit.php?posttype=forum. This vulnerability requires you to be an authenticated user. Steps To Reproduce: Step 1. Visit...

POC-EXP

This repository contains a collection of proof-of-concept PoC exploits for various vulnerabilities. The exploits are written in Python and target different applications, including Apache James Server, Apache Flink Web Dashboard, and Apache Solr. The Apache James Server exploit is a remote command...

ceph-ansible: hard coded credential in ceph-ansible playbook

A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. Any authenticated attacker can abuse this flaw to brute-force Ceph deployments, and gain administrator access to Ceph clusters via the Ceph...

PT-2021-10078

Name of the Vulnerable Software and Affected Versions: ceph-ansible versions prior to 6.0.0alpha1 Description: A flaw was found in the ceph-ansible playbook where it contained hardcoded passwords that were being used as default passwords while deploying Ceph services. Any authenticated attacker c...

Online Healthcare management system 1.0 - Authentication Bypass Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Healthcare management system 1.0 - Authentication Bypass Exploit Author: BKpatron Vendor Homepage: https://www.sourcecodester.com/php/14217/online-healthcare-patient-record-management-system-using-phpmysql.html Software...