CVE-2022-47373

CVE-2022-47373 PandoraFMS 漏洞标题：反射型跨站脚本 日期：15/02/2023 漏洞作者：Gaurish Kauthankar 厂商主页：https://pandorafms.com/en/ 软件链接：https://github.com/pandorafms/pandorafms 版本： 测试环境：Ubuntu CVE编号：CVE-2022-47373 复现步骤： 1. 在模块库部分的搜索功能中添加 xss payload。 2. 观察 payload 执行。 3. 现在将与受害用户分享包含 xss payload 的 URL，用于窃取...

MINI-V766-H4PM-X282

Bulletin has no description...

MINI-V766-R983-W2P9

Bulletin has no description...

CVE-2022-47373 Reflected Cross Site Scripting in Search Functionality of Module Library

Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus results in executing malicious JavaScript...