Cloudview NMS 2.00b - Arbitrary File Upload (Metasploit)

Cloudview NMS 2.00b - Arbitrary File Upload Metasploit require 'msf/core' class MetasploitModule 'Cloudview NMS File Upload', 'Description' = %q This module exploits a file upload vulnerability found within Cloudview NMS 'james fitts' , 'License' = MSFLICENSE, 'References' = 'URL', '0day' ,...

Cloudview NMS < 2.00b - Arbitrary File Upload (Metasploit)

require 'msf/core' class MetasploitModule 'Cloudview NMS File Upload', 'Description' = %q This module exploits a file upload vulnerability found within Cloudview NMS 'james fitts' , 'License' = MSFLICENSE, 'References' = 'URL', '0day' , 'DefaultOptions' = 'EXITFUNC' = 'thread', , 'Privileged' =...

CloudView NMS Cross-Site Scripting Vulnerability (CNVD-2017-12302)

CloudView NMS is a network management and monitoring system that automatically discovers, monitors and performs tasks from CloudView NMS USA. A cross-site scripting vulnerability exists in versions of CloudView NMS prior to 2.10a. A remote attacker can exploit this vulnerability to inject arbitra...

CVE-2016-5076

CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def...

CVE-2016-5073

CloudView NMS before 2.10a has XSS via SNMP...

CVE-2016-5075

CloudView NMS before 2.10a has XSS via a TELNET login...

CVE-2016-5074

CloudView NMS before 2.10a has a format string issue exploitable over SNMP...

CVE-2016-5076

CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def...

CVE-2016-5073

CloudView NMS before 2.10a has XSS via SNMP...

Information disclosure

CloudView NMS before 2.10a allows remote attackers to obtain sensitive information via a direct request for admin/auto.def...

Format string

CloudView NMS before 2.10a has a format string issue exploitable over SNMP...

Design/Logic Flaw

CloudView NMS before 2.10a has XSS via a TELNET login...

Design/Logic Flaw

CloudView NMS before 2.10a has XSS via SNMP...

CVE-2016-5075

CloudView NMS (before 2.10a) is affected by a Cross-Site Scripting (XSS) vulnerability via a TELNET login. Root cause: XSS in the login flow. Impact as described: vulnerability could allow injection of script/HTML. Affected version: prior to 2.10a; fix likely in 2.10a or later (document implies u...

CVE-2016-5076

CloudView NMS is affected by CVE-2016-5076: prior to version 2.10a, a remote attacker can disclose sensitive information by making a direct request to admin/auto.def. Affected product: CloudView NMS; vulnerable component/endpoint is the admin/auto.def request path; root cause is information discl...

CVE-2016-5074

CloudView NMS before 2.10a has a format string issue exploitable over SNMP...

CVE-2016-5074

CVE-2016-5074 affects CloudView NMS prior to version 2.10a. Connected sources consistently describe a format-string vulnerability in CloudView NMS that is exploitable over SNMP. The vulnerability arises in formatting-related handling within the affected component, enabling potential descriptor in...

CVE-2016-5073

CloudView NMS (before 2.10a) is reported vulnerable to Cross‑Site Scripting (XSS) via SNMP. The CNVD entry confirms a remote attacker can inject arbitrary script/HTML through SNMP, with impact limited to the web interface’s confidentiality/ integrity, and requires no authentication due to SNMP ex...

CVE-2016-5075

CloudView NMS before 2.10a has XSS via a TELNET login...

CVE-2016-5073

CloudView NMS before 2.10a has XSS via SNMP...