PT-2026-7923 · Heatmiser · Netmonitor

Ismail Tasdelen · Publicado 2026-02-12 · Atualizado 2026-02-12 · CVE-2019-25323

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Heatmiser Netmonitor version 3.03

Description The software contains an HTML injection issue in the outputSetup.htm page. Attackers can inject malicious HTML code through the outputtitle parameter by sending specially crafted POST requests. This allows for the execution of arbitrary HTML and potential manipulation of the web interface's displayed content. The vulnerable parameter is outputtitle.

Recommendations Apply a fix to sanitize the outputtitle parameter to prevent the injection of malicious HTML code.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-25323

Produtos afetados

Netmonitor

Referências · 6

• 🔥 https://exploit-db.com/exploits/47828 · Exploit
• https://vulncheck.com/advisories/heatmiser-netmonitor-html-injection · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25323 · Nota de Segurança
• https://web.archive.org/web/20190724160628/https://heatmiser.com/en · Nota
• https://t.me/CVEtracker/44566 · Publicação no Telegram
• https://zoneregeling.nl/heatmiser/netmonitor-handleiding.pdf · Nota