4 matches found
CVE-2024-51026
The NetAdmin IAM system (version 4.0.30319 ) is susceptible to a Cross-Site Scripting (XSS) vulnerability within the /BalloonSave.ashx endpoint. An authenticated user can inject a malicious payload into the Content= field, which executes whenever an affected page is refreshed. The security impact...
CVE-2024-51026
The NetAdmin IAM system version 4.0.30319 has a Cross Site Scripting XSS vulnerability in the /BalloonSave.ashx endpoint, where it is possible to inject a malicious payload into the Content= field...
PT-2024-34493 · Unknown · Netadmin Iam System
Name of the Vulnerable Software and Affected Versions: NetAdmin IAM system version 4.0.30319 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It affects the "/BalloonSave.ashx" endpoint, where a malicious payload can be injected into the Content field. Recommendations: Fo...
