EUVD-2021-22131

Malware in sbrugna...

CVE-2021-35489

Thruk 2.40-2 allows /thruk/cgi-bin/extinfo.cgi?type=2=HOSTNAME=SERVICENAME=BACKEND Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browses the page containing...

CVE-2021-35489

Thruk 2.40-2 allows /thruk/cgi-bin/extinfo.cgi?type=2&host=HOSTNAME&service=SERVICENAME&backend=BACKEND Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browse...

PT-2021-20929

Name of the Vulnerable Software and Affected Versions: Thruk versions 2.40-2 Description: The issue allows for Reflected XSS via the host or service parameter in the /thruk/cgi-bin/extinfo.cgi API endpoint. An attacker could inject arbitrary JavaScript into extinfo.cgi, and the malicious payload...

Thruk 跨站脚本漏洞

Thruk is an open source multi-backend monitoring web interface by Sven Nierlein, an individual developer in Germany. Thruk suffers from a cross-site scripting vulnerability that stems from reflective XSS via host or service parameters. An attacker can inject arbitrary JavaScript into extinfo.cgi....

CVE-2021-35489: Improper Neutralization of Input During Web Page Generation

Thruk 2.40-2 allows /thruk/cgi-bin/extinfo.cgi?type=2&host=HOSTNAME&service=SERVICENAME&backend=BACKEND Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browse...