DDIVRT-2011-39 SolarWinds Storage Manager Server SQL Injection Authentication Bypass

Title ----- DDIVRT-2011-39 SolarWinds Storage Manager Server SQL Injection Authentication Bypass Severity -------- High Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: r@b13$ Date Discovered --------------- December 7, 2011 Vulnerability Description...

SolarWinds Orion Data Storage Manager SQL Injection and XSS Vulnerabilities

This host is running SolarWinds Orion Data Storage Manager and is prone SQL injection and cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: secpodsolarwindsorionstoragemanagermultvuln.nasl 5956 2017-04-14 09:02:12Z teissa $ SolarWinds Orion Data Storage Manager SQL Injection a...

SolarWinds Orion Data Storage Manager SQLi and XSS Vulnerabilities

SolarWinds Orion Data Storage Manager is prone to SQL injection SQLi and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Solarwinds Storage Manager 5.1.0 SQL Injection

This module exploits a SQL injection found in Solarwinds Storage Manager login interface. It will send a malicious SQL query to create a JSP file under the web root directory, and then let it download and execute our malicious executable under the context of SYSTEM. Module Options msf use...

SolarWinds Orion NPM Multiple Cross Site Scripting Vulnerabilities

This host is running SolarWinds Orion NPM and is prone to cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gborionnpmmultxssvuln.nasl 7044 2017-09-01 11:50:59Z teissa $ SolarWinds Orion NPM Multiple Cross Site Scripting Vulnerabilities Authors: Antu Sanadi Copyright: Copyrigh...

SolarWinds Orion NPM 10.1.2 SP1 Multiple XSS Vulnerabilities

SolarWinds Orion NPM is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Orion SolarWinds 10.1.2 Cross Site Scripting

Software : Orion SolarWinds 10.1.2 - SP1 XSS -----------------------------------------------------------------------------------------------------------------------------------------------------------------...

CVE-2010-4828

Multiple cross-site scripting XSS vulnerabilities in SolarWinds Orion Network Performance Monitor NPM 10.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Title parameter to MapView.aspx; NetObject parameter to 2 NodeDetails.aspx and 3 InterfaceDetails.aspx; and the 4...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SolarWinds Orion Network Performance Monitor NPM 10.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Title parameter to MapView.aspx; NetObject parameter to 2 NodeDetails.aspx and 3 InterfaceDetails.aspx; and the 4...

CVE-2010-4828

Multiple cross-site scripting XSS vulnerabilities in SolarWinds Orion Network Performance Monitor NPM 10.1 allow remote attackers to inject arbitrary web script or HTML via the 1 Title parameter to MapView.aspx; NetObject parameter to 2 NodeDetails.aspx and 3 InterfaceDetails.aspx; and the 4...

CVE-2010-4828

CVE-2010-4828 affects SolarWinds Orion Network Performance Monitor (NPM) 10.1 and is due to multiple cross-site scripting (XSS) weaknesses. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML by abusing input parameters in specific pages: Title in MapView.aspx; NetOb...

Multiple XSS in Solarwinds Orion NPM 10.1

Values placed in the URI of the browser are rendered correctly. Orion NPM 10.1 has just been released, so there is no known fix available as of yet. Examples: Most "variable=" that I've checked are vulnerable:...

SolarWinds Orion Network Performance Monitor (NPM) Multiple Cross Site Scripting Vulnerabilities

SolarWinds Orion NPM is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may le...

SolarWinds Orion Network Performance Monitor (NPM) Detection (HTTP)

HTTP based detection of the SolarWinds Orion Network Performance Monitor NPM. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

SolarWinds Orion Network Performance Monitor (NPM) 10.1 Multiple XSS Vulnerabilities

SolarWinds Orion NPM is prone to multiple cross-site-scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Solarwinds Orion NPM 10.1 Cross Site Scripting

Values placed in the URI of the browser are rendered correctly. Orion NPM 10.1 has just been released, so there is no known fix available as of yet. Examples: Most "variable=" that I've checked are vulnerable:...

SolarWinds Orion Network Performance Monitor (NPM) 10.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/45257/info SolarWinds Orion NPM is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting...

SolarWinds Orion Network Performance Monitor (NPM) 10.1 - Multiple Cross-Site Scripting Vulnerabilities

SolarWinds Orion Network Performance Monitor NPM 10.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/45257/info SolarWinds Orion NPM is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user-supplied input. An...

SolarWinds TFTP Server < 10.4.0.14 DoS

At least one instance of SolarWinds TFTP Server earlier than version 10.4.0.14 is installed on the remote host. Such versions are reportedly affected by a denial of service vulnerability. By sending an overly long 'Write' request it may be possible for an attacker to crash the remote TFTP server....

SolarWinds TFTP Server Installed

SolarWinds TFTP Server is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid47136; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10"; scriptnameenglish:"SolarWinds TFTP Server Installed";...