CVE-2022-45436

CVE-2022-45436 Reflected Cross Site Scripting leading to session hijacking in pandorafms Exploit Title: Reflected Cross Site Scripting Date: 15/02/2023 Exploit Author: Damodar Naik Vendor Homepage: https://pandorafms.com/en/ Software Link: https://github.com/pandorafms/pandorafms Version: = v765 ...

CVE-2022-43980

CVE-2022-43980 Vulnerabilità di Cross Site Scripting persistente nella funzionalità di modifica delle mappe di rete di PandoraFMS Titolo Exploit: Cross Site Scripting persistente Data: 15/02/2023 Autore Exploit: Gaurish Kauthankar Vendor Homepage: https://pandorafms.com/en/ Software Link:...

MINI-HQ86-V765-QQRP

Bulletin has no description...

CGA-2C8F-66PJ-V765

Bulletin has no description...

MINI-GH76-9G2P-V765

Bulletin has no description...

MINI-F8GH-2QP5-V765

Bulletin has no description...

CVE-2022-45437

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting XSS. A user with edition privileges can create a Payload in the reporting dashboard module. An admin user can observe the Payload...

Artica PFMS Pandora FMS 跨站脚本漏洞

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Artica PFMS Pandora FMS v765, which stems from improper neutralization of user input. A...

PT-2023-14666 · Artica · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Artica PFMS Pandora FMS version v765 Description: The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting XSS. A user with edition privileges can create a payload in the reporting...

CVE-2022-43980

CVE-2022-43980 describes a stored cross-site scripting vulnerability in Pandora FMS v765 within the network maps editing feature. An attacker can edit a network map to inject an XSS payload; when an admin user clicks the edited map, the payload can execute and potentially exfiltrate the admin coo...