Netsweeper 3.0.6 - Open Redirection Detection

An open redirect vulnerability in remotereporter/loadlogfiles.php in Netsweeper before 4.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter. !/usr/bin/env python3 -- coding: utf-8 -- """An open redirect vulnerability in...

Netsweeper 4.0.4 - Cross-Site Scripting Detection

A cross-site scripting vulnerability in remotereporter/loadlogfiles.php in Netsweeper 4.0.3 and 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the url parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting vulnerability in...

PT-2020-7779

Name of the Vulnerable Software and Affected Versions: Netsweeper versions 4.0.3 through 4.0.4 Description: The issue is related to a cross-site scripting XSS vulnerability. It affects the remotereporter/load logfiles.php file and allows remote attackers to inject arbitrary web script or HTML via...

CVE-2014-9612: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in remotereporter/loadlogfiles.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to execute arbitrary SQL commands via the server parameter...

CVE-2014-9606: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allow remote attackers to inject arbitrary web script or HTML via the 1 server parameter to remotereporter/loadlogfiles.php, 2 customctid parameter to...

CVE-2014-9617: URL Redirection to Untrusted Site

Open redirect vulnerability in remotereporter/loadlogfiles.php in Netsweeper before 4.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter...

PT-2020-7786

Name of the Vulnerable Software and Affected Versions: Netsweeper versions prior to 4.0.5 Description: The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter in the remotereporter/load logfiles.php file. This enables...

PT-2020-7782

Name of the Vulnerable Software and Affected Versions: Netsweeper versions 3.1.10 and earlier Netsweeper versions 4.0.x through 4.0.8 Netsweeper versions 4.1.x through 4.1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands via the server parameter in the...