31 matches found
NethServer 7.3.1611 (Upload.json) CSRF Script Insertion Vulnerability
Description NethServer suffers from an authenticated stored XSS vulnerability. Input passed to the 'BackupConfigUploadDescription' POST parameter is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser sessio...
NethServer 7.3.1611 - Cross-Site Request Forgery (Create User / Enable SSH Access) Vulnerability
Exploit for jsp platform in category web applications HTML Decoded PoC: history.pushState'', '', '/' input type="hidden"...
NethServer 7.3.1611 - Cross-Site Request Forgery / Cross-Site Scripting Vulnerabilities
Exploit for jsp platform in category web applications NethServer 7.3.1611 Upload.json CSRF Script Insertion Vulnerability Vendor: NethServer.org Product web page: https://www.nethserver.org Affected version: 7.3.1611-u1-x8664 Summary: NethServer is an operating system for the Linux enthusiast,...
NethServer 7.3.1611 (Upload.json) CSRF Script Insertion Vulnerability
Summary NethServer is an operating system for the Linux enthusiast, designed for small offices and medium enterprises. It's simple, secure and flexible. Description NethServer suffers from an authenticated stored XSS vulnerability. Input passed to the 'BackupConfigUploadDescription' POST paramete...
NethServer 7.3.1611 (create.json) CSRF Create User And Enable SSH Access
Summary NethServer is an operating system for the Linux enthusiast, designed for small offices and medium enterprises. It's simple, secure and flexible. Description The application interface allows users to perform certain actions via HTTP requests without performing any validity checks to verify...
NethServer 7.3.1611 Upload.json CSRF Script Insertion
NethServer 7.3.1611 Upload.json CSRF Script Insertion Vulnerability Vendor: NethServer.org Product web page: https://www.nethserver.org Affected version: 7.3.1611-u1-x8664 Summary: NethServer is an operating system for the Linux enthusiast, designed for small offices and medium enterprises. It's...
NethServer 7.3.1611 - Cross-Site Request Forgery Cross-Site Scripting
NethServer 7.3.1611 - Cross-Site Request Forgery Cross-Site Scripting NethServer 7.3.1611 Upload.json CSRF Script Insertion Vulnerability Vendor: NethServer.org Product web page: https://www.nethserver.org Affected version: 7.3.1611-u1-x8664 Summary: NethServer is an operating system for the Linu...
NethServer 7.3.1611 - Cross-Site Request Forgery (Create User Enable SSH Access)
NethServer 7.3.1611 - Cross-Site Request Forgery Create User Enable SSH Access HTML Decoded PoC: history.pushState'', '', '/' input type="hidden" name="AccountUsercreategrou...
NethServer 7.3.1611 CSRF Create User / Enable SSH Access
HTML Decoded PoC: history.pushState'', '', '/' input type="hidden" name="...
NethServer 7.3.1611 - Cross-Site Request Forgery / Cross-Site Scripting
NethServer 7.3.1611 Upload.json CSRF Script Insertion Vulnerability Vendor: NethServer.org Product web page: https://www.nethserver.org Affected version: 7.3.1611-u1-x8664 Summary: NethServer is an operating system for the Linux enthusiast, designed for small offices and medium enterprises. It's...