Vulnerabilities

TI-2021-10689 CVE-2021-30147 · GHSA-3qfw-xv6h-ff5g

DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php.

MEDIUM 44

DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0352 Published 2021-04-07 No fix listed CWE-352

TI-2021-09915 CVE-2021-29011 · GHSA-g2c2-jfjx-j48j

DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the…

LOW 30

DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description, name, or address field (under admin.php).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01392 Published 2021-04-02 No fix listed CWE-79

TI-2021-09916 CVE-2021-29012 · GHSA-c9c3-4c2f-4w5r

DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session.

MEDIUM 48

DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03205 Published 2021-04-02 No fix listed CWE-287

TI-2010-04024 CVE-2010-4275 · GHSA-f8mw-q536-545m

Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote…

LOW 19

Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) name or (2) descr parameter in an (a) update_usergr…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01248 Published 2010-12-22 No fix listed CWE-79

Vulnerabilities

Filters

DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php.

DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the…

DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session.

Multiple cross-site scripting (XSS) vulnerabilities in Radius Manager 3.8.0 allow remote…