Vulnerabilities

TI-2019-10785 CVE-2019-14466 · GHSA-x55p-vmqf-hfxg

The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection…

LOW 31

The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote authenticated attacker to perform file deletions (in the context of the user account that runs the w…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01177 Published 2019-12-31 No fix listed CWE-502

TI-2015-07220 CVE-2015-8771 · GHSA-7v8f-m723-533x

The generate_smb_nt_hash function in include/functions.inc in GOsa allows remote…

MEDIUM 47

The generate_smb_nt_hash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted password.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02395 Published 2017-02-13 No fix listed CWE-94

TI-2014-07939 CVE-2014-9760 · GHSA-6wxq-vf75-xrch

Cross-site scripting (XSS) vulnerability in the displayLogin function in html/index.php…

LOW 30

Cross-site scripting (XSS) vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers to inject arbitrary web script or HTML via the username.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01219 Published 2017-02-13 No fix listed CWE-79

Vulnerabilities

Filters

The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection…

The generate_smb_nt_hash function in include/functions.inc in GOsa allows remote…

Cross-site scripting (XSS) vulnerability in the displayLogin function in html/index.php…