EUVD-2021-22131

Malware in sbrugna...

CVE-2021-35489

Thruk 2.40-2 allows /thruk/cgi-bin/extinfo.cgi?type=2=HOSTNAME=SERVICENAME=BACKEND Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browses the page containing...

CVE-2021-35489

Thruk 2.40-2 allows /thruk/cgi-bin/extinfo.cgi?type=2&host=HOSTNAME&service=SERVICENAME&backend=BACKEND Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browse...

Thruk 跨站脚本漏洞

Thruk is an open source multi-backend monitoring web interface by Sven Nierlein, an individual developer in Germany. Thruk suffers from a cross-site scripting vulnerability that stems from reflective XSS via host or service parameters. An attacker can inject arbitrary JavaScript into extinfo.cgi....