|
281741
|
6.1 |
MEDIUM
Network
|
netsweeper
|
netsweeper
|
Open redirect vulnerability in remotereporter/load_logfiles.php in Netsweeper before 4.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in t…
|
CWE-601
Open Redirect
|
CVE-2014-9617
|
2024-11-21 11:21 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281742
|
6.1 |
MEDIUM
Network
|
netsweeper
|
netsweeper
|
Cross-site scripting (XSS) vulnerability in Netsweeper 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the url parameter to webadmin/deny/index.php.
|
CWE-79
Cross-site Scripting
|
CVE-2014-9615
|
2024-11-21 11:21 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281743
|
9.8 |
CRITICAL
Network
|
netsweeper
|
netsweeper
|
The Web Panel in Netsweeper before 4.0.5 has a default password of branding for the branding account, which makes it easier for remote attackers to obtain access via a request to webadmin/.
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2014-9614
|
2024-11-21 11:21 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281744
|
9.8 |
CRITICAL
Network
|
netsweeper
|
netsweeper
|
Multiple SQL injection vulnerabilities in Netsweeper before 2.6.29.10 allow remote attackers to execute arbitrary SQL commands via the (1) login parameter to webadmin/auth/verification.php or (2) dpi…
|
CWE-89
SQL Injection
|
CVE-2014-9613
|
2024-11-21 11:21 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281745
|
9.8 |
CRITICAL
Network
|
netsweeper
|
netsweeper
|
SQL injection vulnerability in remotereporter/load_logfiles.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to execute arbitrary SQL commands via t…
|
CWE-89
SQL Injection
|
CVE-2014-9612
|
2024-11-21 11:21 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281746
|
5.3 |
MEDIUM
Network
|
netsweeper
|
netsweeper
|
Directory traversal vulnerability in webadmin/reporter/view_server_log.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to list directory contents v…
|
CWE-22
Path Traversal
|
CVE-2014-9609
|
2024-11-21 11:21 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281747
|
6.1 |
MEDIUM
Network
|
netsweeper
|
netsweeper
|
Cross-site scripting (XSS) vulnerability in webadmin/policy/group_table_ajax.php/ in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to inject arbitrary w…
|
CWE-79
Cross-site Scripting
|
CVE-2014-9608
|
2024-11-21 11:21 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281748
|
6.1 |
MEDIUM
Network
|
netsweeper
|
netsweeper
|
Cross-site scripting (XSS) vulnerability in remotereporter/load_logfiles.php in Netsweeper 4.0.3 and 4.0.4 allows remote attackers to inject arbitrary web script or HTML via the url parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2014-9607
|
2024-11-21 11:21 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281749
|
6.1 |
MEDIUM
Network
|
netsweeper
|
netsweeper
|
Multiple cross-site scripting (XSS) vulnerabilities in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) s…
|
CWE-79
Cross-site Scripting
|
CVE-2014-9606
|
2024-11-21 11:21 |
2020-02-20 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
281750
|
9.8 |
CRITICAL
Network
|
atutor
|
atutor
|
confirm.php in ATutor 2.2 and earlier allows remote attackers to bypass authentication and gain access as an existing user via the auto_login parameter.
|
CWE-287
Improper Authentication
|
CVE-2014-9753
|
2024-11-21 11:21 |
2020-02-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|