Veracode Vulnerability DatabaseVERACODE:24130Cross-Site Scripting (XSS)
EPSS
Percentile
70.5%
cacti is vulnerable to cross-site scripting (XSS). Multiple cross-site scripting (XSS) flaws were discovered in Cacti. An unauthenticated, or authenticated user with certain administrative privileges, could perform an XSS attack against victims viewing Cacti web pages.
References
secunia.com/advisories/41041
svn.cacti.net/viewvc?view=rev&revision=5901
www.cacti.net/release_notes_0_8_7f.php
www.mandriva.com/security/advisories?name=MDVSA-2010:160
www.redhat.com/security/updates/classification/#important
www.securityfocus.com/archive/1/511393
www.securityfocus.com/bid/40332
www.vupen.com/english/advisories/2010/1203
www.vupen.com/english/advisories/2010/2132
access.redhat.com/errata/RHSA-2010:0635
access.redhat.com/security/cve/CVE-2010-1644
bugzilla.redhat.com/show_bug.cgi?id=609093
rhn.redhat.com/errata/RHSA-2010-0635.html
Related
