EUVD-2020-16605

Malware in sbrugna...

NeDi <= 1.9C Multiple XSS Vulnerabilities

NeDi is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2020-23868

NeDi 1.9C allows inc/rt-popup.php d XSS...

Cross site scripting

NeDi 1.9C allows inc/rt-popup.php d XSS...

CVE-2020-23868

CVE-2020-23868 affects NeDi 1.9C, where the inc/rt-popup.php handler is vulnerable to cross-site scripting due to insufficient validation of client-side data. This is corroborated by the NVD entry and OpenVAS entries describing NeDi

PT-2020-15598

Name of the Vulnerable Software and Affected Versions NeDi version 1.9C Description The issue allows for a "d XSS" attack, which is likely referring to a type of cross-site scripting vulnerability, in the inc/rt-popup.php file. Recommendations For NeDi version 1.9C, consider restricting access to...