PT-2020-7783

Name of the Vulnerable Software and Affected Versions: Netsweeper versions prior to 2.6.29.10 Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the login parameter to the "webadmin/auth/verification.php" API endpoint or the dpid parameter t...

PT-2020-7785

Name of the Vulnerable Software and Affected Versions: Netsweeper version 4.0.4 Description: The issue allows remote attackers to inject arbitrary web script or HTML via the url parameter to "webadmin/deny/index.php" API endpoint. This is a cross-site scripting XSS issue, which can lead to the...

CVE-2014-9615: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Netsweeper 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the url parameter to webadmin/deny/index.php...

CVE-2014-9613: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Netsweeper before 2.6.29.10 allow remote attackers to execute arbitrary SQL commands via the 1 login parameter to webadmin/auth/verification.php or 2 dpid parameter to webadmin/deny/index.php...