CVE-2022-45436

CVE-2022-45436 Reflected Cross Site Scripting leading to session hijacking in pandorafms Exploit Title: Reflected Cross Site Scripting Date: 15/02/2023 Exploit Author: Damodar Naik Vendor Homepage: https://pandorafms.com/en/ Software Link: https://github.com/pandorafms/pandorafms Version: Tested...

CVE-2022-43980

CVE-2022-43980 Stored Cross Site Scripting Vulnerability in the network maps edit functionality of PandoraFMS Exploit Title: Stored Cross Site Scripting Date: 15/02/2023 Exploit Author: Gaurish Kauthankar Vendor Homepage: https://pandorafms.com/en/ Software Link:...

MINI-HQ86-V765-QQRP

Bulletin has no description...

CGA-2C8F-66PJ-V765

Bulletin has no description...

MINI-GH76-9G2P-V765

Bulletin has no description...

MINI-F8GH-2QP5-V765

Bulletin has no description...

CVE-2022-45437

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting XSS. A user with edition privileges can create a Payload in the reporting dashboard module. An admin user can observe the Payload...

CVE-2022-45436: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all platforms, allows Cross-Site Scripting XSS. As a manager privilege user , create a network map containing name as xss payload. Once created, admin user must clic...

Artica PFMS Pandora FMS 跨站脚本漏洞

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Artica PFMS Pandora FMS v765, which stems from improper neutralization of user input. A...

PT-2023-14666 · Artica · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Artica PFMS Pandora FMS version v765 Description: The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting XSS. A user with edition privileges can create a payload in the reporting...

CVE-2022-43980

CVE-2022-43980 describes a stored cross-site scripting vulnerability in Pandora FMS v765 within the network maps editing feature. An attacker can edit a network map to inject an XSS payload; when an admin user clicks the edited map, the payload can execute and potentially exfiltrate the admin coo...