Ramikan

**Nome do software vulnerável e versões afetadas** Xinuos (anteriormente SCO) Openserver, versões v5 e v6 **Descrição** A vulnerabilidade permite que invasores executem comandos arbitrários por meio de metacaracteres de shell nos parâmetros `outputform` ou `toclevels` do “cgi-bin/printbook”. **Recomendações** Para as versões v5 e v6 do Xinuos (anteriormente SCO) Openserver, considere restringir o acesso ao endpoint “cgi-bin/printbook” até que um patch esteja disponível. Como solução temporária, evite usar os parâmetros `outputform` e `toclevels` no endpoint afetado para minimizar o risco de exploração. No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Nome do software vulnerável e versões afetadas** Xinuo Openserver versões 5 e 6 **Descrição** Uma vulnerabilidade de Cross-site scripting (XSS) refletido permite que invasores remotos injetem scripts da Web ou tags HTML arbitrários por meio do parâmetro `section`. Isso possibilita que os invasores executem scripts maliciosos no navegador da vítima. **Recomendações** Para o Xinuo Openserver versão 5: atualize para uma versão que corrija essa vulnerabilidade. Para o Xinuo Openserver versão 6: atualize para uma versão que corrija essa vulnerabilidade. Como solução temporária, considere restringir o acesso ao parâmetro `section` para minimizar o risco de exploração.

**Nome do software vulnerável e versões afetadas** Spiceworks versão 7.5.7.0 **Descrição** A vulnerabilidade permite que um invasor realize uma injeção de cabeçalho de host, possibilitando-lhe renderizar links arbitrários que apontam para um site malicioso por meio de páginas da web com cabeçalhos de host adulterados. **Recomendações** Para a versão 7.5.7.0 do Spiceworks, considere restringir o acesso ao recurso de injeção de cabeçalho de host até que uma correção esteja disponível. No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

**Name of the Vulnerable Software and Affected Versions** Kirona Dynamic Resource Scheduling (DRS) version 5.5.3.5 **Description** An issue in Kirona Dynamic Resource Scheduling (DRS) allows an unauthenticated user to access the "/osm/REGISTER.cmd" (also known as "/osm tiles/REGISTER.cmd") endpoint directly. This endpoint contains sensitive information about the database through SQL queries within the batch file, exposing details such as database version, table name, and column name. **Recommendations** For version 5.5.3.5, consider restricting access to the "/osm/REGISTER.cmd" endpoint to prevent unauthorized users from accessing sensitive database information. As a temporary workaround, restrict access to this endpoint until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Kirona Dynamic Resource Scheduling (DRS) version 5.5.3.5 **Description** A reflected Cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script. This is achieved via the "password" parameter in the "/osm/report/" API endpoint. **Recommendations** For version 5.5.3.5, avoid using the `password` parameter in the "/osm/report/" API endpoint until the issue is resolved. As a temporary workaround, consider restricting access to this endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Embedthis GoAhead version 2.5.0 **Description** An issue was discovered where certain pages, such as "goform/login" and "config/log off page.htm", create links containing a hostname obtained from an arbitrary HTTP Host header sent by an attacker. This could potentially be used in a phishing attack. **Recommendations** For Embedthis GoAhead version 2.5.0, consider restricting access to the affected pages, such as "goform/login" and "config/log off page.htm", until a patch is available. As a temporary workaround, avoid using the arbitrary HTTP Host header to generate links on these pages.

**Name of the Vulnerable Software and Affected Versions** Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.82.130611 **Description** A reflected HTML injection issue allows remote attackers to inject arbitrary HTML elements via specific API endpoints, including `/DataLog.csv?log=`, `/AlarmLog.csv?log=`, `/waitlog.cgi?name=`, `/chart.shtml?data=`, or `/createlog.cgi?name=` requests. **Recommendations** For Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.82.130611, consider restricting access to the vulnerable API endpoints, such as `/DataLog.csv?log=`, `/AlarmLog.csv?log=`, `/waitlog.cgi?name=`, `/chart.shtml?data=`, and `/createlog.cgi?name=`, until a patch is available. Avoid using these endpoints with untrusted input to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** ShoreTel Connect ONSITE versions prior to 19.49.1500.0 **Description** A reflected Cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the `brandUrl` parameter. **Recommendations** For versions prior to 19.49.1500.0, update to version 19.49.1500.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** ShoreTel Connect ONSITE version 19.45.1602.0 **Description** A reflected Cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `url` parameter. This enables attackers to potentially execute malicious scripts on the victim's browser. **Recommendations** For ShoreTel Connect ONSITE version 19.45.1602.0, consider restricting access to the vulnerable parameter `url` to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ShoreTel Connect ONSITE version 18.82.2000.0 **Description** A reflected Cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the `page` parameter. This is related to the lack of protection measures for the web page structure in Mitel Connect OnSite conferencing systems, which can be exploited by a remote attacker to inject arbitrary web script or HTML code. **Recommendations** For ShoreTel Connect ONSITE version 18.82.2000.0, as a temporary workaround, consider restricting access to the `page` parameter in the affected API endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.