1067 matches found
CVE-2021-36698
Pandora FMS through 755 allows XSS via a new Event Filter with a crafted name...
CVE-2021-36698
Pandora FMS through 755 allows XSS via a new Event Filter with a crafted name...
Design/Logic Flaw
With an admin account, the .htaccess file in Artica Pandora FMS =755 can be overwritten with the File Manager component. The new .htaccess file contains a Rewrite Rule with a type definition. A normal PHP file can be uploaded with this new "file type" and the code can be executed with an HTTP...
Cross site scripting
Pandora FMS through 755 allows XSS via a new Event Filter with a crafted name...
CVE-2021-36697
CVE-2021-36697 affects Artica Pandora FMS
CVE-2021-36698
Pandora FMS through 755 allows XSS via a new Event Filter with a crafted name...
CVE-2021-36698
Summary: Pandora FMS up to version 755 is reported to be vulnerable to a cross-site scripting (XSS) flaw in the Event Filter feature, exploitable via a crafted name. The issue is described across multiple sources as affecting Pandora FMS 755 and prior versions, with the XSS realized through the E...
Artica Pandora FMS 注入漏洞
Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Artica Pandora FMS 755 and earlier versions, which stems from the fact that .htaccess...
Artica Pandora FMS 跨站脚本漏洞
Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way.Artica Pandora FMS 755 and previous versions have security vulnerabilities that allow attackers to perform XSS attacks...
myfactory FMS 7.1-911 - 'Multiple' Reflected Cross-Site Scripting (XSS)
Exploit Title: myfactory FMS 7.1-911 - 'Multiple' Reflected Cross-Site Scripting XSS Exploit Author: RedTeam Pentesting GmbH Vendor Homepage: https://www.myfactory.com/ Version: Enfold input NAME="txtUID" VALUE="RedTeam" onkeypress="OnKeyP...
CVE-2021-42565
myfactory.FMS before 7.1-912 allows XSS via the UID parameter...
CVE-2021-42565
myfactory.FMS before 7.1-912 allows XSS via the UID parameter...
CVE-2021-42566
myfactory.FMS before 7.1-912 allows XSS via the Error parameter...
CVE-2021-42565
myfactory.FMS before 7.1-912 allows XSS via the UID parameter...
CVE-2021-42566
Summary (CVE-2021-42566): myfactory.FMS before 7.1-912 is vulnerable to cross-site scripting via the Error parameter. The issue affects the web application’s input handling, allowing an attacker to inject scripts that run in a victim’s browser. Products: myfactory.FMS. Affected versions: 7.1-? up...
myfactory.FMS 跨站脚本漏洞
myfactory.FMS is a transaction management system. A cross-site scripting vulnerability exists in Myfactory.FMS that stems from the product's UID parameter failing to properly validate user input data. The vulnerability can be exploited to execute client-side code. The following products and...
Pandora FMS Arbitrary File Upload (CVE-2021-34074)
An arbitrary file upload vulnerability exists in Pandora FMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Pandora FMS Information Disclosure Vulnerability
Pandora FMS is a monitoring system from Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. An information disclosure vulnerability exists in the File Manager component of Pandora FMS 754 and earlier versions. An attacker cou...