P4Nk4Jv

The issue allows an unauthenticated attacker to make a request to any internal and external server via the /includes/lib/detail.php endpoint with the `subdomain` variable set to SSRF. This enables the attacker to exploit the blind Server-Side Request Forgery (SSRF) vulnerability.

The issue allows an unauthenticated attacker to make a request to any internal and external server via the /includes/lib/get.php endpoint with the `subdomain` variable set to SSRF. This enables blind Server-Side Request Forgery (SSRF) attacks.

The issue allows an unauthenticated attacker to make a request to any internal and external server via the /includes/lib/tree.php endpoint with the `subdomain` variable set to SSRF. This enables blind Server-Side Request Forgery (SSRF) attacks.

The issue allows an attacker to execute arbitrary JavaScript code via the "Monitoring-Incidents.php" API endpoint, specifically through the `id` parameter. This enables a cross-site scripting (XSS) attack.

The issue allows an attacker to execute arbitrary JavaScript code via the "Assets-Management.php" `sn` parameter, enabling a cross-site scripting (XSS) attack.

The issue allows an attacker to execute arbitrary JavaScript code via the "snmpget.php" API endpoint, specifically through the `ip` parameter. This enables a cross-site scripting (XSS) attack.

The issue allows an attacker to execute arbitrary JavaScript code via the "Topology-Routes.php" `rtr` parameter, enabling a cross-site scripting (XSS) attack.

The issue allows an attacker to execute arbitrary JavaScript code via the "Assets-Management.php" `chg` parameter, enabling a cross-site scripting (XSS) attack.