CVE-2013-3502

Mô tả

Tham khảo

• exploit-db.com/exploits/25001
• kb.cert.org/vuls/id/345260 · US Government Resource
• kb.groundworkopensource.com/display/SUPPORT/SA6.7.0-1+Some+web+components+allow+bypass+of+role+access+controls
• sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130308-0_GroundWork_Monitoring_Multiple_critical_vulnerabilities_wo_poc_v10.txt

Lỗ hổng khác của groundwork monitor

• CVE-2013-3513TRUNG BÌNH 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in the Noma component in GroundWork Monitor Enterprise 6.7.0 allow remote attacke…
• CVE-2013-3512TRUNG BÌNH 6.5The Cacti component in GroundWork Monitor Enterprise 6.7.0 does not properly perform authorization checks, which allows remote authenticated…
• CVE-2013-3511TRUNG BÌNH 5.8Open redirect vulnerability in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote attackers to redirect users to arbitr…
• CVE-2013-3510TRUNG BÌNH 6.5Multiple SQL injection vulnerabilities in GroundWork Monitor Enterprise 6.7.0 allow remote authenticated users to execute arbitrary SQL comm…
• CVE-2013-3509TRUNG BÌNH 6.5html/System-NeDi.php in the NeDi component in GroundWork Monitor Enterprise 6.7.0 allows remote authenticated users to execute arbitrary com…