Recent Vulnerabilities Research Posts Trends Blog About Contact

open-audit vulnerabilities and exploits

1 EDB exploit

Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI.

Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI.

Open-audit Open-audit 2.1

1 EDB exploit

3.5

CVSSv2

Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen.

Open-audit Open-audit 2.1

1 EDB exploit

5.8

CVSSv2

An issue exists in Open-AudIT Professional 2.1. It is possible to inject a malicious payload in the redirect_url parameter to the /login URI to trigger an open redirect. A "data:text/html;base64," payload can be used with JavaScript code.

Open-audit Open-audit 2.1

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote malicious users to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin->Logs section (with a logs?logs.type= URI) and the Manage->Attribut...

Open-audit Open-audit 2.1.1

1 EDB exploit

7.5

CVSSv2

An issue exists in Opmantek Open-AudIT after 3.5.0. Without authentication, a vulnerability in code_igniter/application/controllers/util.php allows an attacker perform command execution without echoes.

Opmantek Open-audit

4.3

CVSSv2

Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the ...

Opmantek Open-audit

1 Github repository

3.5

CVSSv2

Cross-site scripting (XSS) vulnerability in Attributes functionality in Open-AudIT Community edition prior to 2.2.2 allows remote malicious users to inject arbitrary web script or HTML via a crafted attribute name of an Attribute.

Opmantek Open-audit

1 EDB exploit

6.5

CVSSv2

The Create Discoveries feature of Open-AudIT prior to 3.2.0 allows an authenticated malicious user to execute arbitrary OS commands via a crafted value for a URL field.

Opmantek Open-audit

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

open-audit vulnerabilities and exploits

Vulmon Search

About

Products

Connect