49 matches found
PT-2019-18540
Name of the Vulnerable Software and Affected Versions ZoneMinder versions prior to 1.32.4 Description A Self-Stored XSS issue exists, allowing an attacker to execute HTML or JavaScript code in the 'log' view. This occurs because the 'Log Message' value is insecurely printed on the web page withou...
CVE-2019-7351: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Log Injection exists in ZoneMinder through 1.32.3, as an attacker can entice the victim to visit a specially crafted link, which in turn will inject a custom Log message provided by the attacker in the 'log' view page, as demonstrated by the message=User%20'admin'%20Logged%20in value...
CVE-2019-6267
The Premium WP Suite Easy Redirect Manager plugin 28.07-17 for WordPress has XSS via a crafted GET request that is mishandled during log viewing at the templates/admin/redirect-log.php URI...
dashboard: log file arbitrary file retrieval
It was found that the local log-viewing function of the redhat-access-plugin for OpenStack Dashboard horizon did not sanitize user input. An authenticated user could use this flaw to read an arbitrary file with the permissions of the web server...
Satellite: Spacewalk contains XSS in log file view
A stored cross-site scripting XSS flaw was found in the way spacewalk-java displayed log files. By sending a specially crafted request to Satellite, a remote attacker could embed HTML content into the log file, allowing them to inject malicious content into the web page that is used to view that...
CVE-2014-0337
Cross-site scripting XSS vulnerability in the web interface on Huawei Echo Life HG8247 routers with software before V100R006C00SPC127 allows remote attackers to inject arbitrary web script or HTML via an invalid TELNET connection attempt with a crafted username that is not properly handled during...
Fedora 14 : cgit-0.9-1.fc14 (2011-2803)
In addition to closing a DOS vulnerability thanks to Jim Meyering, this upstream feature release adds the following enhancements : - Support for side-by-side diffs - Support for repo content in 'about' view - Improved integration with gitolite/gitweb - Support for git notes in commit/log view -...
Fedora 15 : cgit-0.9-1.fc15 (2011-2790)
In addition to closing a DOS vulnerability thanks to Jim Meyering, this upstream feature release adds the following enhancements : - Support for side-by-side diffs - Support for repo content in 'about' view - Improved integration with gitolite/gitweb - Support for git notes in commit/log view -...
