69 matches found
CVE-2023-34096
Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends. In versions 3.06 and prior, the file panorama.pm is vulnerable to a Path Traversal vulnerability which allows an attacker to upload a file to any folder which has write...
Path traversal
Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends. In versions 3.06 and prior, the file panorama.pm is vulnerable to a Path Traversal vulnerability which allows an attacker to upload a file to any folder which has write...
CVE-2023-34096 Thruk has Path Traversal Vulnerability in panorama.pm
Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends. In versions 3.06 and prior, the file panorama.pm is vulnerable to a Path Traversal vulnerability which allows an attacker to upload a file to any folder which has write...
CVE-2023-34096 Thruk has Path Traversal Vulnerability in panorama.pm
Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends. In versions 3.06 and prior, the file panorama.pm is vulnerable to a Path Traversal vulnerability which allows an attacker to upload a file to any folder which has write...
CVE-2023-34096
Thruk has a Path Traversal vulnerability (CVE-2023-34096) in panorama.pm affecting versions
CVE-2023-34096 Thruk has Path Traversal Vulnerability in panorama.pm
Thruk is a multibackend monitoring webinterface which currently supports Naemon, Icinga, Shinken and Nagios as backends. In versions 3.06 and prior, the file panorama.pm is vulnerable to a Path Traversal vulnerability which allows an attacker to upload a file to any folder which has write...
PT-2023-8802 · Thruk · Thruk
Name of the Vulnerable Software and Affected Versions: Thruk versions 3.06 and prior Description: The issue concerns a Path Traversal vulnerability in the panorama.pm file, which allows an attacker to upload a file to any folder with write permissions on the affected system. The location paramete...
Thruk 路径遍历漏洞
Thruk is an open source multi-backend monitoring web interface from the individual developer Sven Nierlein in Germany. A path traversal vulnerability exists in Thruk 3.06 and earlier versions, which stems from vulnerability to a path traversal vulnerability that allows an attacker to upload files...
Thruk Cross-Site Scripting Vulnerability
Thruk is an open source multi-backend monitoring web interface from the personal developer Sven Nierlein of Germany. cross-site scripting vulnerability exists in Thruk 2.40-2, which stems from the system allowing the storage of XSS. no detailed vulnerability details are currently available...
CVE-2021-35490
Thruk before 2.44 allows XSS for a quick command...
CVE-2021-35490
Thruk before 2.44 allows XSS for a quick command...
Command injection
Thruk before 2.44 allows XSS for a quick command...
CVE-2021-35490
CVE-2021-35490 affects Thruk, an open-source multi-backend monitoring web interface. Thruk before 2.44 contains a cross-site scripting (XSS) vulnerability that enables XSS via a quick command. The CVE entry cites impact as low/medium (NVD CVSS 3.1 base score 5.4). No specific root-cause details o...
CVE-2021-35490
Thruk before 2.44 allows XSS for a quick command...
Thruk 跨站脚本漏洞
Thruk is an open source multi-backend monitoring web interface from the personal developer Sven Nierlein of Germany. cross-site scripting vulnerability exists in Thruk 2.40-2, which stems from the system allowing the storage of XSS. no detailed vulnerability details are currently available...
CVE-2021-35488
Thruk 2.40-2 allows /thruk/cgi-bin/status.cgi?style=combined&title=TITLE Reflected XSS via the host or title parameter. An attacker could inject arbitrary JavaScript into status.cgi. The payload would be triggered every time an authenticated user browses the page containing it...
CVE-2021-35489
Thruk 2.40-2 allows /thruk/cgi-bin/extinfo.cgi?type=2&host=HOSTNAME&service=SERVICENAME&backend=BACKEND Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browse...
CVE-2021-35489
Thruk 2.40-2 allows /thruk/cgi-bin/extinfo.cgi?type=2&host=HOSTNAME&service=SERVICENAME&backend=BACKEND Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browse...
CVE-2021-35488
Thruk 2.40-2 allows /thruk/cgi-bin/status.cgi?style=combined&title=TITLE Reflected XSS via the host or title parameter. An attacker could inject arbitrary JavaScript into status.cgi. The payload would be triggered every time an authenticated user browses the page containing it...
Cross site scripting
Thruk 2.40-2 allows /thruk/cgi-bin/extinfo.cgi?type=2&host=HOSTNAME&service=SERVICENAME&backend=BACKEND Reflected XSS via the host or service parameter. An attacker could inject arbitrary JavaScript into extinfo.cgi. The malicious payload would be triggered every time an authenticated user browse...