Nxlog Code Issue Vulnerability

Nxlog is a U.S. Nxlog company can support a variety of operating systems for log collection, log centralization software. A security vulnerability exists in NXLog Community Edition version 2.10.2150, which originates in the fileop module of the NXLog service that allows remote attackers to cause ...

CVE-2020-35488

The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service daemon crash via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also, the name of the directory created must use a Syslo...

Directory traversal

The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service daemon crash via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also, the name of the directory created must use a Syslo...

CVE-2020-35488

NXLog Community Edition 2.10.2150 is affected via the fileop module, where a crafted Syslog payload can cause a daemon crash (DoS) when the Syslog field is used to name a directory. Exploitation requires a specific configuration (CreateDir enabled and a Syslog-derived directory name), as shown by...

PT-2021-11775

Name of the Vulnerable Software and Affected Versions: NXLog Community Edition version 2.10.2150 Description: The fileop module of the NXLog service allows remote attackers to cause a denial of service daemon crash via a crafted Syslog payload to the Syslog service. This attack requires a specifi...

Nxlog code issue vulnerabilities

Nxlog is a U.S. Nxlog company can support a variety of operating systems for log collection, log centralization software. A security vulnerability exists in NXLog Community Edition version 2.10.2150, which originates in the fileop module of the NXLog service that allows remote attackers to cause ...

CVE-2020-35488: Deserialization of Untrusted Data

The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service daemon crash via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also, the name of the directory created must use a Syslo...

cPanel 11.x 'fileop' Parameter Multiple Cross Site Scripting Vulnerabilities

No description provided by source...

CVE-2009-4823

Cross-site scripting XSS vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote attackers to inject arbitrary web script or HTML via the fileop parameter...

CVE-2009-4823: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote attackers to inject arbitrary web script or HTML via the fileop parameter...

cPanel fileop参数跨站脚本漏洞

BUGTRAQ ID: 37394 cPanel是基于Web的工具，用于自动化控制网站和服务器。 cPanel没有正确地过滤提交给frontend/x3/files/fileop.html的fileop参数便返回给了用户，远程攻击者可以通过提交恶意参数请求执行跨站脚本攻击，在用户浏览器会话中执行任意代码。 cPanel 11.x 厂商补丁： cPanel ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.cpanel.net...