CVE-2019-1000024

OPT/NET BV NG-NetMS prior to or equal to v3.6-2 contains a Cross-Site Scripting (XSS) flaw in /js/libs/jstree/demo/filebrowser/index.php. The attack is triggered by manipulating the GET parameters id and operation, allowing arbitrary JavaScript to be returned in the page response. This vulnerabil...

CVE-2019-1000023

CVE-2019-1000023 affects OPTOSS Next Gen Network Management System (NG-NetMS) v3.6-2 and earlier. The issue is a SQL Injection in vulnerable parameters id, id_access_type, and id_attr_access, allowing an attacker to inject and execute arbitrary SQL commands on the database. Exploitation is possib...