CVE-2020-12261

Description

References

• packetstormsecurity.com/files/157401/Open-AudIT-3.3.0-Cross-Site-Scripting.html · Exploit
• community.opmantek.com/display/OA/Errata+-+3.3.0+XSS+in+error+templates
• community.opmantek.com/display/OA/Release+Notes+for+Open-AudIT+v3.3.1 · Release Notes
• exploit-db.com/exploits/48516

Mais vulnerabilidades de open-audit

• CVE-2021-44674MÉDIO 6.5An information exposure issue has been discovered in Opmantek Open-AudIT 4.2.0. The vulnerability allows an authenticated attacker to read f…
• CVE-2021-40612CRÍTICO 9.8An issue was discovered in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in code_igniter/application/controllers/…
• CVE-2021-44916MÉDIO 6.1Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability. If a bad value is passed to …
• CVE-2021-3333MÉDIO 6.1Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting (XSS). When outputting SQL statements for debugging, a maliciously crafted que…
• CVE-2021-3130MÉDIO 5.9Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users u…