CVE-2020-11941

Description

References

• packetstormsecurity.com/files/157476/Open-AudIT-3.2.2-Command-Injection-SQL-Injection.html · Third Party Advisory
• community.opmantek.com/display/OA/Release+Notes+for+Open-AudIT+v3.3.0 · Release Notes
• coresecurity.com/advisories/open-audit-multiple-vulnerabilities · Exploit

Altre vulnerabilità di open-audit

• CVE-2021-44674MEDIO 6.5An information exposure issue has been discovered in Opmantek Open-AudIT 4.2.0. The vulnerability allows an authenticated attacker to read f…
• CVE-2021-40612CRITICO 9.8An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in code_igniter/application/controllers/…
• CVE-2021-44916MEDIO 6.1Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability. If a bad value is passed to …
• CVE-2021-3333MEDIO 6.1Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting (XSS). When outputting SQL statements for debugging, a maliciously crafted que…
• CVE-2021-3130MEDIO 5.9Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users u…