PT-2026-7923 · Heatmiser · Netmonitor

Ismail Tasdelen · Published 2026-02-12 · Updated 2026-02-12 · CVE-2019-25323

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Heatmiser Netmonitor version 3.03

Description The software contains an HTML injection issue in the outputSetup.htm page. Attackers can inject malicious HTML code through the outputtitle parameter by sending specially crafted POST requests. This allows for the execution of arbitrary HTML and potential manipulation of the web interface's displayed content. The vulnerable parameter is outputtitle.

Recommendations Apply a fix to sanitize the outputtitle parameter to prevent the injection of malicious HTML code.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-25323

Affected Products

Netmonitor

References · 6

• 🔥 https://exploit-db.com/exploits/47828 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25323 · Security Note
• https://vulncheck.com/advisories/heatmiser-netmonitor-html-injection · Note
• https://web.archive.org/web/20190724160628/https://heatmiser.com/en · Note
• https://t.me/CVEtracker/44566 · Telegram Post
• https://zoneregeling.nl/heatmiser/netmonitor-handleiding.pdf · Note