CVE-2022-43980

CVE-2022-43980 Vulnerabilidad de Cross Site Scripting Almacenado en la funcionalidad de edición de mapas de red de PandoraFMS Título del Exploit: Cross Site Scripting Almacenado Fecha: 15/02/2023 Autor del Exploit: Gaurish Kauthankar Página del proveedor: https://pandorafms.com/en/ Enlace del...

CVE-2022-45436

CVE-2022-45436 Cross-Site Scripting Reflejado que conduce al secuestro de sesión en pandorafms Exploit Title: Cross-Site Scripting Reflejado Date: 15/02/2023 Exploit Author: Damodar Naik Vendor Homepage: https://pandorafms.com/en/ Software Link: https://github.com/pandorafms/pandorafms Version: =...

MINI-HQ86-V765-QQRP

Bulletin has no description...

CGA-2C8F-66PJ-V765

Bulletin has no description...

MINI-GH76-9G2P-V765

Bulletin has no description...

MINI-F8GH-2QP5-V765

Bulletin has no description...

CVE-2022-45437

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all allows Cross-Site Scripting XSS. A user with edition privileges can create a Payload in the reporting dashboard module. An admin user can observe the Payload...

CVE-2022-45436: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Artica PFMS Pandora FMS v765 on all platforms, allows Cross-Site Scripting XSS. As a manager privilege user , create a network map containing name as xss payload. Once created, admin user must clic...

Artica PFMS Pandora FMS 跨站脚本漏洞

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Artica PFMS Pandora FMS v765, which stems from improper neutralization of user input. A...

PT-2023-14666 · Artica · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Artica PFMS Pandora FMS version v765 Description: The issue is related to improper neutralization of input during web page generation, allowing Cross-Site Scripting XSS. A user with edition privileges can create a payload in the reporting...

CVE-2022-43980

CVE-2022-43980 describes a stored cross-site scripting vulnerability in Pandora FMS v765 within the network maps editing feature. An attacker can edit a network map to inject an XSS payload; when an admin user clicks the edited map, the payload can execute and potentially exfiltrate the admin coo...