EUVD-2018-8834

Malware in sbrugna...

K-Net Cisco Configuration Manager Cross-Site Scripting Vulnerability

K-Net Cisco Configuration Manager is a PHP and MySQL based tool for managing the configuration of Cisco devices. A cross-site scripting vulnerability exists in K-Net Cisco Configuration Manager 2014-11-19 and earlier versions, which can be exploited by remote attackers to inject arbitrary web...

CVE-2018-17051

K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php...

Code injection

K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php...

CVE-2018-17051

The CVE concerns K-Net Cisco Configuration Manager up to 2014-11-19 with a Cross-Site Scripting (XSS) vulnerability exploitable via devices.php. CNVD notes it affects PHP/MySQL based deployments. NVD describes XSS via devices.php but does not provide exploit specifics beyond that. No remediation ...

CVE-2018-17051

K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php...

CVE-2018-17051: Improper Neutralization of Input During Web Page Generation

K-Net Cisco Configuration Manager through 2014-11-19 has XSS via devices.php...

PT-2018-13864

Name of the Vulnerable Software and Affected Versions K-Net Cisco Configuration Manager versions through 2014-11-19 Description The issue is related to a security problem where an attacker can execute malicious scripts on the device. This is achieved through the devices.php endpoint, which is...