Skip to content
OpenAdvisories

Package · Debian

gosa

6 known vulnerabilities.

6 results · Feed

  • Unscored —

    The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote…

  • Unscored —

    Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into any accoun…

  • Unscored —
    CVE-2018-1000528 EPSS 46%

    GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulne…

  • Unscored —

    The generate_smb_nt_hash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary command…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers…

  • Unscored —

    Unspecified vulnerability in GONICUS System Administration (GOsa) before 2.5.8 allows remote authenticated users to mod…