CVE-2018-8903

Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen.

• CWE-79

• https://nileshsapariya.blogspot.ae/2018/03/csrf-to-xss-open-auditit-professional-21.htmlExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44354/Exploit, Third Party Advisory, VDB Entry
• https://nileshsapariya.blogspot.ae/2018/03/csrf-to-xss-open-auditit-professional-21.htmlExploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44354/Exploit, Third Party Advisory, VDB Entry

Published

Mar 22, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-8897A statement in the System Programming Guide of the Intel 64 …
• CVE-2018-8898A flaw in the authentication mechanism in the Login Panel of…
• CVE-2018-8899IdentityServer IdentityServer4 1.x before 1.5.3 and 2.x befo…
• CVE-2018-8900The License Manager service of HASP SRM, Sentinel HASP and S…
• CVE-2018-8901An issue was discovered in Ivanti Avalanche for all versions…
• CVE-2018-8902An issue was discovered in Ivanti Avalanche for all versions…
• CVE-2018-8904In Windows Master (aka Windows Optimization Master) 7.99.13.…
• CVE-2018-8905In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the…8.8
• CVE-2018-8906dsmall v20180320 has XSS via a crafted street address to pub…
• CVE-2018-8908An issue was discovered in /admin/?/user/add in Frog CMS 0.9…
• CVE-2018-8909The Wire application before 2018-03-07 for Android allows at…
• CVE-2018-8910Cross-site scripting (XSS) vulnerability in Attachment Previ…6.5