TI-2025-31090 CVE-2025-48952
NetAlertX has Password Bypass Vulnerability due to Loose Comparison in PHP
Priority HIGH 82
NetAlertX is a network, presence scanner, and alert framework.
4 records
NetAlertX is a network, presence scanner, and alert framework.
NetAlertX is a network, presence scanner and alert framework.
NetAlertX 24.7.18 before 24.10.12 allows unauthenticated file reading because an HTTP client can ignore a redirect, and because of factors related to strpos and directory traversal, as exploited in the wild in May 2025.
NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025.