Ozer Goker

**Name of the Vulnerable Software and Affected Versions** OrientDB version 3.0.17 **Description** OrientDB 3.0.17 has a stored cross-site scripting issue. Authenticated attackers can inject malicious scripts by creating users with script payloads in the `name` parameter. Attackers can send POST requests to the `/document` API endpoint with JavaScript code in the `name` field, leading to arbitrary script execution when users view the application. **Recommendations** Avoid creating users with script payloads in the `name` parameter. Restrict or sanitize input to the `name` parameter when creating users. As a temporary workaround, consider disabling user creation functionality until a fix is available.

**Name of the Vulnerable Software and Affected Versions** OrientDB version 3.0.17 **Description** The software contains a reflected cross-site scripting issue that allows attackers to inject malicious scripts. Attackers can send POST requests to the ''/document/demodb/-1:-1'' API endpoint with script tags in the `name` parameter to execute arbitrary JavaScript in users' browsers. The attack involves submitting crafted JSON payloads to the document endpoint. **Recommendations** Apply input validation and sanitization to the `name` parameter in the ''/document/demodb/-1:-1'' API endpoint to prevent the injection of script tags.

**Name of the Vulnerable Software and Affected Versions** phpMoAdmin version 1.1.5 **Description** The software contains a reflected cross-site scripting issue that allows attackers to inject malicious scripts. Unauthenticated attackers can manipulate the `newdb` parameter in the `moadmin.php` file to inject JavaScript payloads. Attackers can create URLs with these payloads, causing arbitrary code execution in users' browsers when they visit the malicious link. The vulnerable parameter is `newdb` within the ''/moadmin.php'' endpoint. **Recommendations** Update phpMoAdmin to a newer version that addresses this issue. As a temporary workaround, sanitize the `newdb` parameter in the ''moadmin.php'' file to prevent the injection of malicious scripts.

**Name of the Vulnerable Software and Affected Versions** OrientDB version 3.0.17 GA Community Edition **Description** The software contains cross-site request forgery flaws that could allow attackers to perform unauthorized actions. This is achieved by creating malicious requests to API endpoints such as '/database/', '/command/', and '/document/'. Specifically, attackers can create or delete databases, modify schema classes, manage users, and create functions by sending authenticated requests without proper token validation. These issues are combined with reflected and stored cross-site scripting flaws in the web interface. **Recommendations** Apply updates to address the identified cross-site request forgery and cross-site scripting issues.

**Name of the Vulnerable Software and Affected Versions** PHPMoAdmin version 1.1.5 **Description** The software contains a cross-site request forgery flaw. This allows attackers to perform unauthorized database operations by creating malicious requests. Attackers can deceive authenticated users into submitting GET requests to the `moadmin.php` endpoint with parameters such as `action`, `db`, and `collection`. This enables the creation, deletion, or repair of databases and collections without the user's knowledge. The vulnerable parameter is `action`. **Recommendations** Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the `moadmin.php` endpoint to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** phpMoAdmin version 1.1.5 **Description** The software contains a stored cross-site scripting issue that allows attackers without authentication to inject malicious scripts. This is achieved by manipulating the `collection` parameter. Attackers can send GET requests to the ''moadmin.php'' endpoint with script payloads in the `collection` parameter during collection creation. This allows for the execution of arbitrary JavaScript in the browsers of users. **Recommendations** Update phpMoAdmin to a newer version that addresses this issue. As a temporary workaround, sanitize the `collection` parameter to prevent script injection. Restrict access to the ''moadmin.php'' endpoint to authorized users only.

**Name of the Vulnerable Software and Affected Versions** Comodo Dome Firewall version 2.7.0 **Description** A stored cross-site scripting issue allows authenticated attackers to inject malicious JavaScript code. This is achieved by submitting crafted input to the `comment` parameter via the "/admin profiles" endpoint, which then executes in the browsers of other users who view the affected page. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the "/admin profiles" endpoint or avoid using the `comment` parameter until a fix is available.

**Name of the Vulnerable Software and Affected Versions** Comodo Dome Firewall version 2.7.0 **Description** A reflected cross-site scripting issue allows unauthenticated attackers to inject malicious scripts. This is achieved by sending POST requests to the 'login' endpoint with script payloads in the `username` parameter, enabling the execution of arbitrary JavaScript in the browsers of users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Comodo Dome Firewall version 2.7.0 **Description** A reflected cross-site scripting issue exists where attackers can inject malicious scripts by submitting crafted input to the 'snat' endpoint. This is achieved by sending POST requests containing JavaScript payloads within the `port` or `snat to ip` parameters, leading to the execution of arbitrary scripts in the browsers of users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the 'snat' endpoint or avoid using the `port` and `snat to ip` parameters until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Comodo Dome Firewall version 2.7.0 **Description** A reflected cross-site scripting issue exists in the backup schedule interface. Attackers can execute arbitrary scripts in users' browsers by sending POST requests to the 'backupschedule' endpoint containing JavaScript code within the `BACKUP RCPTTO` parameter. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Comodo Dome Firewall version 2.7.0 **Description** A reflected cross-site scripting issue allows attackers to inject malicious scripts into users' browsers. This is achieved by sending POST requests to the "/netwizard2" endpoint using crafted input in the `netmask addr` parameter to execute arbitrary JavaScript. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, avoid using the `netmask addr` parameter in the "/netwizard2" endpoint.

**Name of the Vulnerable Software and Affected Versions** Comodo Dome Firewall version 2.7.0 **Description** A reflected cross-site scripting issue exists where attackers can inject malicious scripts by manipulating the `destination` parameter. This is achieved by sending POST requests to the routing endpoint, allowing the execution of arbitrary JavaScript in the browsers of users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Comodo Dome Firewall version 2.7.0 **Description** A reflected cross-site scripting issue allows attackers to inject malicious scripts. By submitting POST requests to the policy routing endpoint using the `source` and `destination` parameters, an attacker can execute arbitrary JavaScript in the browsers of users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Comodo Dome Firewall version 2.7.0 **Description** A reflected cross-site scripting issue exists where attackers can inject malicious scripts by manipulating the `GATEWAY GREEN` parameter. This is achieved by sending POST requests to the DHCP configuration endpoint, allowing the execution of arbitrary JavaScript within the browsers of administrators. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Comodo Dome Firewall version 2.7.0 **Description** A reflected cross-site scripting issue allows attackers to inject malicious scripts into users' browsers. This is achieved by sending POST requests to the 'korugan/cmclient' endpoint with script payloads in the `organization` parameter, leading to the execution of arbitrary JavaScript. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `organization` parameter in the 'korugan/cmclient' endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Comodo Dome Firewall version 2.7.0 **Description** A reflected cross-site scripting issue allows attackers to inject malicious scripts by submitting crafted input to the `FWADDRESSES` parameter. This is achieved by sending POST requests to the '/korugan/fwgroups' endpoint with script payloads, enabling the execution of arbitrary JavaScript in users' browsers to steal session data. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `FWADDRESSES` parameter in the '/korugan/fwgroups' endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Comodo Dome Firewall version 2.7.0 **Description** A reflected cross-site scripting issue exists where attackers can inject malicious scripts by submitting unsanitized input to the 'hotspot permanent users' endpoint. This is achieved by sending POST requests containing JavaScript payloads within the `MACADDRESSES` parameter, leading to the execution of arbitrary scripts in the browsers of users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `MACADDRESSES` parameter in the 'hotspot permanent users' endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Comodo Dome Firewall version 2.7.0 **Description** A reflected cross-site scripting issue allows unauthenticated attackers to inject malicious scripts. By crafting requests to the "/manage/ips/appid/" endpoint and manipulating the `ID` parameter, attackers can execute arbitrary JavaScript in the browsers of victims. **Recommendations** As a temporary workaround, avoid using the `ID` parameter in the "/manage/ips/appid/" endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Comodo Dome Firewall version 2.7.0 **Description** A reflected cross-site scripting issue allows attackers to inject malicious scripts by submitting crafted input. Attackers can send POST requests to the 'QoS devices management' endpoint using the `device` parameter to execute arbitrary JavaScript in users' browsers. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the `device` parameter in the 'QoS devices management' endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Comodo Dome Firewall version 2.7.0 **Description** A stored cross-site scripting issue exists where attackers can inject malicious scripts by submitting crafted input to the `newLicense` parameter. This is achieved by sending POST requests to the license activation endpoint, allowing the execution of arbitrary JavaScript in the browsers of administrators. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the license activation endpoint or avoid using the `newLicense` parameter until a patch is available.