الباحثون
رجوع
Ulisses Castro
باحث من
Conviso IT Security
#36503
من 60,403
7.8
إجمالي CVSS
الثغرات
·
2
منخفضة
1
متوسطة
1
PT-2010-5394
2010-12-30
4.3
CVE-2010-4276
Livezilla
Livezilla
A cross-site scripting (XSS) issue exists in the lz tracking set sessid function, allowing remote attackers to inject arbitrary web script or HTML via the `livezilla` parameter in a track action to "server.php".
PT-2010-5393
2010-12-22
3.5
CVE-2010-4275
Daloradius
Radius Manager
The issue allows remote authenticated administrators to inject arbitrary web script or HTML. This can be achieved via the `name` or `descr` parameter in an "update usergroup" or "store nas" action to "admin.php".