CVE-2017-7416

ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated.

• CWE-79

• https://github.com/ntop/ntopng/blob/3.0/CHANGELOG.mdIssue Tracking, Patch, Release Notes, Third Party Advisory
• https://github.com/ntop/ntopng/blob/3.0/CHANGELOG.mdIssue Tracking, Patch, Release Notes, Third Party Advisory

Published

Jun 26, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7410Multiple SQL injection vulnerabilities in account/signup.php…9.8
• CVE-2017-7411An issue was discovered in Enalean Tuleap 9.6 and prior vers…
• CVE-2017-7412NixOS 17.03 before 17.03.887 has a world-writable Docker soc…7.8
• CVE-2017-7413In Horde_Crypt before 2.7.6, as used in Horde Groupware Webm…
• CVE-2017-7414In Horde_Crypt before 2.7.6, as used in Horde Groupware Webm…
• CVE-2017-7415Atlassian Confluence 6.x before 6.0.7 allows remote attacker…
• CVE-2017-7418ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whe…
• CVE-2017-7419A OAuth application in NetIQ Access Manager 4.3 before 4.3.2…4.6
• CVE-2017-7420An Authentication Bypass (CWE-287) vulnerability in ESMAC (a…
• CVE-2017-7421Reflected and stored Cross-Site Scripting (XSS, CWE-79) vuln…
• CVE-2017-7422Reflected and stored Cross-Site Scripting (XSS, CWE-79) vuln…
• CVE-2017-7423A Cross-Site Request Forgery (CWE-352) vulnerability in esfa…