Exploit-CVE-2024-9513-NetAdmin-IAM-Allows-User-Enumeration-In-Active-Directory

Exploit Title: CVE-2024-9513 - NetAdmin IAM Allows User Enumeration In Active Directory Date: 2024-10-04 Exploit Author: Elizeu Das Dores ELIZEUOPAIN Vendor Homepage: https://netadmin.software/ Version: 3.5 Tested on: 20224-10-05 CVE : CVE-2024-9513 References: https://vulners.com/cve/CVE-2024-95...

CVE-2024-51026_Overview

CVE-2024-51026 - Cross Site Scripting XSS Vulnerability in NetAdmin IAM Description The NetAdmin IAM system version 4.0.30319 presents a Cross Site Scripting XSS vulnerability in the /BalloonSave.ashx endpoint, where it is possible to inject a malicious payload in the Content= field. Any...

CVE-2024-9513

A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /controller/api/Answer/ReturnUserQuestionsFilled of the component HTTP POST Request Handler. The manipulation of the argument...

CVE-2024-51026

The NetAdmin IAM system version 4.0.30319 has a Cross Site Scripting XSS vulnerability in the /BalloonSave.ashx endpoint, where it is possible to inject a malicious payload into the Content= field...

Exploit for Observable Discrepancy in Netadmin Netadmin_Iam

Exploit Title: CVE-2024-9513 - NetAdmin IAM Allows User Enumer...

Exploit for Observable Discrepancy in Netadmin Netadmin_Iam

Exploit Title: CVE-2024-9513 - NetAdmin IAM Allows User Enumer...

NetAdmin IAM security vulnerabilities

NetAdmin IAM is an application from NetAdmin, Inc. A security vulnerability exists in NetAdmin IAM version 4.0.30319 that stems from a cross-site scripting XSS vulnerability in the /BalloonSave.ashx endpoint...

PT-2024-34493 · Unknown · Netadmin Iam System

Name of the Vulnerable Software and Affected Versions: NetAdmin IAM system version 4.0.30319 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It affects the "/BalloonSave.ashx" endpoint, where a malicious payload can be injected into the Content field. Recommendations: Fo...

CVE-2024-51026: Improper Neutralization of Input During Web Page Generation

The NetAdmin IAM system version 4.0.30319 has a Cross Site Scripting XSS vulnerability in the /BalloonSave.ashx endpoint, where it is possible to inject a malicious payload into the Content= field...

CVE-2024-9513

A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /controller/api/Answer/ReturnUserQuestionsFilled of the component HTTP POST Request Handler. The manipulation of the argument...

CVE-2024-9513 Netadmin Software NetAdmin IAM HTTP POST Request ReturnUserQuestionsFilled information exposure

A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /controller/api/Answer/ReturnUserQuestionsFilled of the component HTTP POST Request Handler. The manipulation of the argument...

CVE-2024-9513 Netadmin Software NetAdmin IAM HTTP POST Request ReturnUserQuestionsFilled information exposure

A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /controller/api/Answer/ReturnUserQuestionsFilled of the component HTTP POST Request Handler. The manipulation of the argument...

CVE-2024-9513

NetAdmin IAM (Netadmin Software) up to version 3.5 has a vulnerability in the HTTP POST Request Handler at /controller/api/Answer/ReturnUserQuestionsFilled. The issue arises from improper manipulation of the username parameter, causing information exposure via discrepancy. Impact is limited to co...

CVE-2024-9513: Observable Discrepancy

A vulnerability was found in Netadmin Software NetAdmin IAM up to 3.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /controller/api/Answer/ReturnUserQuestionsFilled of the component HTTP POST Request Handler. The manipulation of the argument...