TI-2018-06638 CVE-2018-9137 · GHSA-4fc7-7qm8-3hr4
Open-AudIT before 2.2 has CSV Injection.
Priority LOW 35
Open-AudIT before 2.2 has CSV Injection.
Vulnerabilities
6 records
TI-2018-06653 CVE-2018-9155 · GHSA-f22h-jvjx-fm57
Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote…
Priority LOW 27
Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin->Logs section (with…
TI-2018-06475 CVE-2018-8937 · GHSA-9j63-qcfc-89vg
An issue was discovered in Open-AudIT Professional 2.1.
Priority LOW 28
An issue was discovered in Open-AudIT Professional 2.1.
TI-2018-06511 CVE-2018-8979 · GHSA-7wg6-8ch9-xw5r
Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or…
Priority MEDIUM 41
Open-AudIT Professional 2.1 has CSRF, as demonstrated by modifying a user account or inserting XSS sequences via the credentials URI.
TI-2018-06510 CVE-2018-8978 · GHSA-f537-ppj9-w286
Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI.
Priority LOW 25
Open-AudIT Professional 2.1 has XSS via a crafted src attribute of an IMG element within a URI.
TI-2018-06442 CVE-2018-8903 · GHSA-45mx-8q46-wr86
Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen.
Priority LOW 28
Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen.