1080 matches found
myfactory FMS 7.1-911 - 'Multiple' Reflected Cross-Site Scripting (XSS)
Exploit Title: myfactory FMS 7.1-911 - 'Multiple' Reflected Cross-Site Scripting XSS Exploit Author: RedTeam Pentesting GmbH Vendor Homepage: https://www.myfactory.com/ Version: Enfold input NAME="txtUID" VALUE="RedTeam" onkeypress="OnKeyP...
CVE-2021-42565
myfactory.FMS before 7.1-912 allows XSS via the UID parameter...
CVE-2021-42565
myfactory.FMS before 7.1-912 allows XSS via the UID parameter...
CVE-2021-42565
myfactory.FMS before 7.1-912 allows XSS via the UID parameter...
CVE-2021-42566
myfactory.FMS before 7.1-912 allows XSS via the Error parameter...
CVE-2021-42566
Summary (CVE-2021-42566): myfactory.FMS before 7.1-912 is vulnerable to cross-site scripting via the Error parameter. The issue affects the web application’s input handling, allowing an attacker to inject scripts that run in a victim’s browser. Products: myfactory.FMS. Affected versions: 7.1-? up...
myfactory.FMS 跨站脚本漏洞
myfactory.FMS is a transaction management system. A cross-site scripting vulnerability exists in Myfactory.FMS that stems from the product's UID parameter failing to properly validate user input data. The vulnerability can be exploited to execute client-side code. The following products and...
Pandora FMS Arbitrary File Upload (CVE-2021-34074)
An arbitrary file upload vulnerability exists in Pandora FMS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Pandora FMS Information Disclosure Vulnerability
Pandora FMS is a monitoring system from Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. An information disclosure vulnerability exists in the File Manager component of Pandora FMS 754 and earlier versions. An attacker cou...
CVE-2021-34075
In Artica Pandora FMS =754 in the File Manager component, there is sensitive information exposed on the client side which attackers can access...
CVE-2021-34075
In Artica Pandora FMS =754 in the File Manager component, there is sensitive information exposed on the client side which attackers can access...
Design/Logic Flaw
In Artica Pandora FMS =754 in the File Manager component, there is sensitive information exposed on the client side which attackers can access...
CVE-2021-34075
In Artica Pandora FMS =754 in the File Manager component, there is sensitive information exposed on the client side which attackers can access...
CVE-2021-34075
In Artica Pandora FMS =754 in the File Manager component, there is sensitive information exposed on the client side which attackers can access...
CVE-2021-34075
In Artica Pandora FMS, the vulnerability CVE-2021-34075 affects the File Manager component in versions for Pandora FMS 754 and earlier, where sensitive information is exposed on the client-side. The root cause is an information-disclosure flaw in the File Manager, allowing attackers to access sen...
Pandora FMS Cross-Site Scripting Vulnerability
"Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. through visualization.A stored cross-site scripting vulnerability exists in Pandora FMS 7.54 and earlier versions. An attacker could exploit this...
Pandora FMS Arbitrary File Upload Vulnerability
Pandora FMS is a monitoring system from Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. An arbitrary file upload vulnerability exists in Pandora FMS 754 and earlier versions. The vulnerability can be exploited for remote...
CVE-2021-35501
PandoraFMS =7.54 allows Stored XSS by placing a payload in the name field of a visual console. When a user or an administrator visits the console, the XSS payload will be executed...