CVE-2013-3936

CVE-2013-3936 involves multiple cross-site scripting (XSS) vulnerabilities in Opsview prior to 4.4.1 and Opsview Core prior to 20130522, allowing remote attackers to inject arbitrary web script or HTML via the vulnerable web UI. The affected products are Opsview/Open-source Opsview Core (pre-4.4....

CVE-2013-3935

CVE-2013-3935 affects Opsview before 4.4.1 and Opsview Core before 20130522. It is a CSRF vulnerability that could allow remote attackers to hijack administrator authentication to change the admin password via unspecified vectors. The sources do not detail exploit vectors or willing remediation i...