6 results · Feed
-
Unscored —
The GOsa_Filter_Settings cookie in GONICUS GOsa 2.7.5.2 is vulnerable to PHP objection injection, which allows a remote…
-
Unscored —
Incorrect Access Control in the LDAP class of GONICUS GOsa through 2019-04-11 allows an attacker to log into any accoun…
-
Unscored —CVE-2018-1000528 EPSS 46%
GONICUS GOsa version before commit 56070d6289d47ba3f5918885954dcceb75606001 contains a Cross Site Scripting (XSS) vulne…
-
Unscored —
The generate_smb_nt_hash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary command…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the displayLogin function in html/index.php in GOsa allows remote attackers…
-
Unscored —
Unspecified vulnerability in GONICUS System Administration (GOsa) before 2.5.8 allows remote authenticated users to mod…