200 matches found
CVE-2024-37776
A cross-site scripting XSS vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in some admin screens...
CVE-2024-37776
A cross-site scripting XSS vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in some admin screens...
CVE-2024-37773
An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...
CVE-2024-37773
An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...
CVE-2024-37776
A cross-site scripting XSS vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in some admin screens...
CVE-2024-37773
An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...
CVE-2024-37776
Sunbird DCIM dcTrack v9.1.2 is affected by a cross-site scripting (XSS) vulnerability that allows an attacker to execute arbitrary web scripts or HTML through a crafted payload on certain admin screens. The CVE entry notes the issue exists in the reported product/version, but the provided connect...
CVE-2024-37775
Sunbird DCIM dcTrack 9.1.2 contains an access-control flaw that allows an attacker to create or update a ticket with a location while bypassing RBAC checks. The issue is documented across multiple sources (Red Hat and NVD/CNNVD entries) with the same vulnerability description: faulty access contr...
Sunbird DCIM dcTrack 安全漏洞
Sunbird DCIM dcTrack is an asset monitoring management software from Sunbird DCIM. A security vulnerability exists in Sunbird DCIM dcTrack version v9.1.2 that stems from the presence of cross-site request forgery CSRF, which allows an authenticated attacker to elevate the privileges of an...
CVE-2024-37773
CVE-2024-37773 describes an HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 . Authenticated administrators can inject arbitrary HTML into an admin screen, potentially affecting the admin UI. The vulnerability is described with a CVSS v3.1 base score of 4.8 (Medium) , with network attac...
CVE-2024-37774
A Cross-Site Request Forgery CSRF in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive requests in some admin screens...
Sunbird DCIM dcTrack 安全漏洞
Sunbird DCIM dcTrack is an asset monitoring management software from Sunbird DCIM. A security vulnerability exists in Sunbird DCIM dcTrack version v9.1.2, which stems from the presence of faulty access control that allows an attacker to create or update a location ticket with a bypassed RBAC chec...
CVE-2024-37775
Incorrect access control in Sunbird DCIM dcTrack v9.1.2 allows attackers to create or update a ticket with a location which bypasses an RBAC check...
Sunbird DCIM dcTrack 安全漏洞
Sunbird DCIM dcTrack is an asset monitoring and management software from Sunbird DCIM. A security vulnerability exists in Sunbird DCIM dcTrack version v9.1.2, which stems from the presence of an HTML injection vulnerability that allows an attacker authenticated as an administrator to inject...
Sunbird DCIM dcTrack 安全漏洞
Sunbird DCIM dcTrack is an asset monitoring management software from Sunbird DCIM. A security vulnerability exists in Sunbird DCIM dcTrack version v9.1.2, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary web script or HTML via ...
CVE-2024-37774
A Cross-Site Request Forgery CSRF in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive requests in some admin screens...
CVE-2024-37773
An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen...
PT-2024-27744 · Sunbird Dcim · Dctrack
Name of the Vulnerable Software and Affected Versions: Sunbird DCIM dcTrack version 9.1.2 Description: A Cross-Site Request Forgery CSRF issue allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive requests in some admin screens. This can...
CVE-2024-37774
Sunbird DCIM dcTrack v9.1.2 is affected by a CSRF vulnerability that can escalate an authenticated administrator’s privileges by coercing sensitive actions in certain admin screens. The issue is triggered when a logged-in user is forced to perform unintended requests, enabling privilege elevation...