Researchers
Back
Ulisses Castro
Researcher from
Conviso IT Security
#36503
of 60,403
7.8
Total CVSS
Vulnerabilities
·
2
Low
1
Medium
1
PT-2010-5394
2010-12-30
4.3
CVE-2010-4276
Livezilla
Livezilla
A cross-site scripting (XSS) issue exists in the lz tracking set sessid function, allowing remote attackers to inject arbitrary web script or HTML via the `livezilla` parameter in a track action to "server.php".
PT-2010-5393
2010-12-22
3.5
CVE-2010-4275
Daloradius
Radius Manager
The issue allows remote authenticated administrators to inject arbitrary web script or HTML. This can be achieved via the `name` or `descr` parameter in an "update usergroup" or "store nas" action to "admin.php".