354 matches found
OpenNMS < 1.5.96 - Multiple Vulnerabilities
OpenNMS Multiple Vulnerabilities -------------------------------- BugSec | Security Advisory Moshe Ben-Abu | Security Expert Advisory URL PDF: http://www.bugsec.com/upfiles/OpenNMSMultipleVulnerabilities.pdf Vendor ------ OpenNMS Group – http://www.opennms.com OpenNMS Project –...
OpenNMS < 1.5.96 Multiple Remote Vulnerabilities
No description provided by source. OpenNMS Multiple Vulnerabilities -------------------------------- BugSec | Security Advisory Moshe Ben-Abu | Security Expert Advisory URL PDF: http://www.bugsec.com/upfiles/OpenNMSMultipleVulnerabilities.pdf Vendor ------ OpenNMS Group – http://www.opennms.com...
OpenNMS 1.5.96 - Multiple Vulnerabilities
OpenNMS 1.5.96 - Multiple Vulnerabilities OpenNMS Multiple Vulnerabilities -------------------------------- BugSec | Security Advisory Moshe Ben-Abu | Security Expert Advisory URL PDF: http://www.bugsec.com/upfiles/OpenNMSMultipleVulnerabilities.pdf Vendor ------ OpenNMS Group –...
OpenNMS 1.5.x - HTTP Response Splitting
source: https://www.securityfocus.com/bid/31577/info OpenNMS is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This...
CVE-2008-4320
Multiple cross-site scripting XSS vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary web script or HTML via 1 the jusername parameter to jacegisecuritycheck, 2 the username parameter to notification/list.jsp, and 3 the filter parameter to event/list...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary web script or HTML via 1 the jusername parameter to jacegisecuritycheck, 2 the username parameter to notification/list.jsp, and 3 the filter parameter to event/list...
CVE-2008-4320
CVE-2008-4320 concerns OpenNMS prior to 1.5.94 with multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via: (1) the j_username parameter to j_acegi_security_check, (2) the username parameter to notification/list.jsp, and (3) the filter par...
CVE-2008-4320
Multiple cross-site scripting XSS vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary web script or HTML via 1 the jusername parameter to jacegisecuritycheck, 2 the username parameter to notification/list.jsp, and 3 the filter parameter to event/list...
OpenNMS 1.5.x - 'Username' Cross-Site Scripting
source: https://www.securityfocus.com/bid/31410/info OpenNMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
OpenNMS 1.5.x - 'filter' Cross-Site Scripting
source: https://www.securityfocus.com/bid/31410/info OpenNMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
OpenNMS 1.5.x - j_username Cross-Site Scripting
OpenNMS 1.5.x - jusername Cross-Site Scripting source: https://www.securityfocus.com/bid/31410/info OpenNMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code i...
OpenNMS 1.5.x - Username Cross-Site Scripting
OpenNMS 1.5.x - Username Cross-Site Scripting source: https://www.securityfocus.com/bid/31410/info OpenNMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in...
OpenNMS 1.5.x - filter Cross-Site Scripting
OpenNMS 1.5.x - filter Cross-Site Scripting source: https://www.securityfocus.com/bid/31410/info OpenNMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in t...
OpenNMS 1.5.x - 'j_username' Cross-Site Scripting
source: https://www.securityfocus.com/bid/31410/info OpenNMS is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...