Froxlor 跨站请求伪造漏洞

Froxlor is a lightweight server management software from the Froxlor team. A cross-site request forgery vulnerability exists in Froxlor versions prior to 0.10.38. An attacker could exploit this vulnerability to perform cross-site request forgery attacks...

Authentication flaw

The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute some commands for high-level users. This affects:...

Cross site scripting

The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login page, which will cause the user to execute the predefined malicious script in the browser. This affects...

PT-2020-19283

Name of the Vulnerable Software and Affected Versions ZTE server management software module versions V03.08.0100 through V03.05.0040 ZTE server management software module versions V03.07.0300 through V03.07.0100 ZTE server management software module versions V03.07.0103 through V03.05.0020 ZTE...

CVE-2020-6872: Improper Neutralization of Input During Web Page Generation

The server management software module of ZTE has a storage XSS vulnerability. The attacker inserts some attack codes through the foreground login page, which will cause the user to execute the predefined malicious script in the browser. This affects...

CVE-2020-6871: Improper Authentication

The server management software module of ZTE has an authentication issue vulnerability, which allows users to skip the authentication of the server and execute some commands for high-level users. This affects:...

PT-2020-4342

Name of the Vulnerable Software and Affected Versions: ZTE server management software module versions V03.08.0100 through V03.07.0100 for R5300G4 ZTE server management software module versions V03.07.0103 through V03.05.0020 for R8500G4 ZTE server management software module versions V03.08.0100...

Attackers Backdoor NetSarang Software Update Mechanism

Attackers infiltrated the update mechanism for a popular server management software package as recently as last month and modified it to include a backdoor. NetSarang, which has headquarters in South Korea and the United States, has removed the backdoored update, but not before it was activated o...

JVN#22534185: ServerView Operations Manager vulnerable to cross-site scripting

ServerView Operations Manager provided by FUJITSU LIMITED is server management software. ServerView Operations Manager contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version...