TI-2021-09916 CVE-2021-29012 · GHSA-c9c3-4c2f-4w5r
DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session.
Priority MEDIUM 48
DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session.
Dmasoftlab
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Dmasoftlab records in CISA KEVNo Dmasoftlab vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2021-10689 CVE-2021-30147 · GHSA-3qfw-xv6h-ff5g
DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php.
Priority MEDIUM 44
DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php.
TI-2021-09915 CVE-2021-29011 · GHSA-g2c2-jfjx-j48j
DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the…
Priority LOW 30
DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description, name, or address field (under admin.php).
TI-2010-04024 CVE-2010-4275 · GHSA-f8mw-q536-545m
Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote…
Priority LOW 19
Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) name or (2) descr parameter in an (a) update_usergr…