Cross site scripting

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

CVE-2016-1926

The CVE-2016-1926 entry concerns Greenbone Security Assistant (GSA) 6.x up to 6.0.8, where the charts module is vulnerable to cross-site scripting (XSS). The flaw is caused by insufficient input sanitization on the aggregate_type parameter used by the get_aggregate command to omp, enabling a remo...

CVE-2016-1926

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

CVE-2016-1926

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

PT-2016-4926

Name of the Vulnerable Software and Affected Versions Greenbone Security Assistant versions 6.0.0 through 6.0.7 Description A cross-site scripting issue exists due to insufficient input validation in the charts module. This allows remote attackers to inject arbitrary web script or HTML via the...

CVE-2016-1926: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the charts module in Greenbone Security Assistant GSA 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp...

Greenbone Security Assistant (GSA) Default Credentials (HTTP)

The remote Greenbone Security Assistant GSA is installed / configured in a way that it has accounts with default passwords enabled. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

OpenVAS - The World's Most Advanced Open Source Vulnerability Scanner and Manager

The Open Vulnerability Assessment System OpenVAS is a framework of several services and tools. The core of this SSL-secured service-oriented architecture is the OpenVAS Scanner. The scanner very efficiently executes the actual Network Vulnerability Tests NVTs which are served with daily updates v...

OpenVAS Manager Command Injection Vulnerability

No description provided by source. Source: http://securityreason.com/securityalert/8048 Summary It has been identified that OpenVAS Manager is vulnerable to command injection due to insufficient validation of user supplied data when processing OMP requests. It has been identified that this...

Greenbone Security Assistant (GSA) Detection (HTTP)

HTTP based detection of the Greenbone Security Assistant GSA. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Minor flaw allows Hacker to hijack Avira Antivirus customers accounts

Cross site scripting vulnerabilities are mistakenly considered unimportant, but they could allow attackers to inject client-side script in web pages visited by victims. A cross-site scripting xss vulnerability may be exploited by hackers to bypass access controls going beyond the exceptions. An...

Greenbone Security Assistant detection

The remote host is running a Greenbone Security Assistant server, which provides a web-based front-end to OpenVAS and related vulnerability scanning tools. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56819; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22";...

Greenbone Security Assistant Cross-Site Request Forgery Vulnerability

This host is installed with Greenbone Security Assistant and is prone to cross-site request forgery vulnerability. OpenVAS Vulnerability Test $Id: gbgreenbonegsacsrfvuln.nasl 3112 2016-04-19 08:52:10Z antu123 $ Greenbone Security Assistant Cross-Site Request Forgery Vulnerability Authors: Antu...

Greenbone Security Assistant < 2.0.0 CSRF Vulnerability

Greenbone Security Assistant is prone to a cross-site request forgery CSRF vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

OpenVAS Manager Command Injection Vulnerability

Exploit for linux platform in category local exploits Summary It has been identified that OpenVAS Manager is vulnerable to command injection due to insufficient validation of user supplied data when processing OMP requests. It has been identified that this vulnerability allows privilege escalatio...

OpenVAS Manager - Command Injection

Source: http://securityreason.com/securityalert/8048 Summary It has been identified that OpenVAS Manager is vulnerable to command injection due to insufficient validation of user supplied data when processing OMP requests. It has been identified that this vulnerability allows privilege escalation...

OpenVAS Manager - Command Injection

OpenVAS Manager - Command Injection Source: http://securityreason.com/securityalert/8048 Summary It has been identified that OpenVAS Manager is vulnerable to command injection due to insufficient validation of user supplied data when processing OMP requests. It has been identified that this...

CVE-2011-0650

Cross-site request forgery CSRF vulnerability in Greenbone Security Assistant GSA before 2.0+rc3 allows remote attackers to hijack the authentication of users for requests that send email via an OMP request to OpenVAS Manager. NOTE: this issue can be leveraged to bypass authentication requirement...

CVE-2011-0018

The email function in managesql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the 1 To or 2 From e-mail address in an OMP request to the Greenbone Security Assistant GSA...

Cross site request forgery (csrf)

The email function in managesql.c in OpenVAS Manager 1.0.x through 1.0.3 and 2.0.x through 2.0rc2 allows remote authenticated users to execute arbitrary commands via the 1 To or 2 From e-mail address in an OMP request to the Greenbone Security Assistant GSA...