Nxlog Code Issue Vulnerability

Nxlog is a U.S. Nxlog company can support a variety of operating systems for log collection, log centralization software. A security vulnerability exists in NXLog Community Edition version 2.10.2150, which originates in the fileop module of the NXLog service that allows remote attackers to cause ...

CVE-2020-35488

The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service daemon crash via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also, the name of the directory created must use a Syslo...

Directory traversal

The fileop module of the NXLog service in NXLog Community Edition 2.10.2150 allows remote attackers to cause a denial of service daemon crash via a crafted Syslog payload to the Syslog service. This attack requires a specific configuration. Also, the name of the directory created must use a Syslo...

CVE-2020-35488

NXLog Community Edition 2.10.2150 is affected via the fileop module, where a crafted Syslog payload can cause a daemon crash (DoS) when the Syslog field is used to name a directory. Exploitation requires a specific configuration (CreateDir enabled and a Syslog-derived directory name), as shown by...

Nxlog 代码问题漏洞

Nxlog is a U.S. Nxlog company can support a variety of operating systems for log collection, log centralization software. A security vulnerability exists in NXLog Community Edition version 2.10.2150, which originates in the fileop module of the NXLog service that allows remote attackers to cause ...

cPanel 11.x 'fileop' Parameter Multiple Cross Site Scripting Vulnerabilities

No description provided by source...

CVE-2009-4823

Cross-site scripting XSS vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote attackers to inject arbitrary web script or HTML via the fileop parameter...

cPanel fileop参数跨站脚本漏洞

BUGTRAQ ID: 37394 cPanel是基于Web的工具，用于自动化控制网站和服务器。 cPanel没有正确地过滤提交给frontend/x3/files/fileop.html的fileop参数便返回给了用户，远程攻击者可以通过提交恶意参数请求执行跨站脚本攻击，在用户浏览器会话中执行任意代码。 cPanel 11.x 厂商补丁： cPanel ------ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.cpanel.net...