Open redirect

Open redirect vulnerability in Opsview before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Opsview before 4.4.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-7254

Cross-site scripting XSS vulnerability in Opsview before 4.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-7256

Cross-site request forgery CSRF vulnerability in Opsview before 4.4.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-7254

CVE-2013-7254 concerns an XSS vulnerability in Opsview prior to version 4.4.2, where remote attackers could inject arbitrary web script or HTML via unspecified vectors. The NVD entry summarizes the impact as allowing script execution in the victim’s browser with no confidentiality or availability...

CVE-2013-7256

CVE-2013-7256 describes a CSRF vulnerability in Opsview before 4.4.2 that allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. The impact is described as enabling session hijacking without user interaction. The official CVE entry notes a fix in Opsview ...

CVE-2013-7255

CVE-2013-7255 is an open redirect vulnerability in Opsview before 4.4.2. The available documents identify the affected product and version, and describe that remote attackers can redirect users to arbitrary websites and conduct phishing via unspecified vectors. The root cause details, specific vu...

CVE-2013-7255

Open redirect vulnerability in Opsview before 4.4.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2013-5694 Blind SQL Injection in Ops View

CVE-2013-5694 Blind SQL Injection in Ops View Versions: Opsview pre 4.4.1 Author: J. Oquendo joquendo at e-fensive dot net I. ADVISORY Title: Blind SQL Injection in OpsView Date published: 2013-10-28 Vendor contacted: 2013-09-04 II. BACKGROUND Opsview is a systems management software built on ope...

CVE-2013-5695 Multilple Cross Site Scripting (XSS) Attacks in Ops View

CVE-2013-5695 Multilple Cross Site Scripting XSS Attacks in Ops View Versions: Opsview pre 4.4.1 Author: J. Oquendo joquendo at e-fensive dot net I. ADVISORY Title: Multilple Cross Site Scripting XSS Attacks in Ops View Date published: 2013-10-28 Vendor contacted: 2013-09-04 II. BACKGROUND Opsvie...

CVE-2013-5695

Multiple cross-site scripting XSS vulnerabilities in Opsview before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/auditlog/, 2 PATHINFO to info/host/ or 3 viewport/, 4 back parameter to login, or 5 "from" parameter to status/service/recheck...

CVE-2013-5694

SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arbitrary SQL commands via the serviceselection parameter...

Sql injection

SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arbitrary SQL commands via the serviceselection parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Opsview before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/auditlog/, 2 PATHINFO to info/host/ or 3 viewport/, 4 back parameter to login, or 5 "from" parameter to status/service/recheck...

CVE-2013-5695

Multiple cross-site scripting XSS vulnerabilities in Opsview before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/auditlog/, 2 PATHINFO to info/host/ or 3 viewport/, 4 back parameter to login, or 5 "from" parameter to status/service/recheck...

CVE-2013-5695

CVE-2013-5695 affects Opsview prior to 4.4.1 with multiple XSS weaknesses exposed in web UI endpoints: /admin/auditlog, /info/host/, /viewport/, /login, and /status/service/recheck via various parameters (id, PATH_INFO, back, from). The root cause is unvalidated user input that allows injection o...

CVE-2013-5694

SQL injection vulnerability in status/service/acknowledge in Opsview before 4.4.1 allows remote attackers to execute arbitrary SQL commands via the serviceselection parameter...

CVE-2013-5694

Opsview has a SQL injection vulnerability (CVE-2013-5694) in the status/service/acknowledge function accessible via POST to /status/service/acknowledge. The vulnerability affects Opsview versions pre-4.4.1 and is triggered by the service_selection parameter, allowing an attacker to inject SQL and...

Opsview pre 4.4.1 - Blind SQL Injection Vulnerability

Exploit for php platform in category web applications CVE-2013-5694 Blind SQL Injection in Ops View Versions: Opsview pre 4.4.1 Author: J. Oquendo joquendo at e-fensive dot net I. ADVISORY Title: Blind SQL Injection in OpsView Date published: 2013-10-28 Vendor contacted: 2013-09-04 II. BACKGROUND...

Opsview pre 4.4.1 - Blind SQL Injection

CVE-2013-5694 Blind SQL Injection in Ops View Versions: Opsview pre 4.4.1 Author: J. Oquendo joquendo at e-fensive dot net I. ADVISORY Title: Blind SQL Injection in OpsView Date published: 2013-10-28 Vendor contacted: 2013-09-04 II. BACKGROUND Opsview is a systems management software built on ope...