Published: 23/08/2010 Updated: 13/02/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in utilities.php in Cacti prior to 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allows remote malicious users to inject arbitrary web script or HTML via the filter parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cacti cacti 0.5
cacti cacti 0.8.6k
cacti cacti 0.8.6d
cacti cacti 0.6.3
cacti cacti
cacti cacti 0.8.7
cacti cacti 0.8.5a
cacti cacti 0.8.3
cacti cacti 0.6.8
cacti cacti 0.8.2
cacti cacti 0.8.5
cacti cacti 0.6.6
cacti cacti 0.8.7d
cacti cacti 0.8.7b
cacti cacti 0.8.7a
cacti cacti 0.6.2
cacti cacti 0.6.5
cacti cacti 0.8.6f
cacti cacti 0.8.6g
cacti cacti 0.8.6j
cacti cacti 0.8.7c
cacti cacti 0.6.1
cacti cacti 0.8
cacti cacti 0.8.7e
cacti cacti 0.8.6a
cacti cacti 0.8.6i
cacti cacti 0.8.6
cacti cacti 0.6.8a
cacti cacti 0.6.7
cacti cacti 0.8.1
cacti cacti 0.8.4
cacti cacti 0.8.6c
cacti cacti 0.6.4
cacti cacti 0.8.6b
cacti cacti 0.8.2a
cacti cacti 0.8.3a
cacti cacti 0.8.6h
cacti cacti 0.6

Debian Bug report logs - #742768 cacti: CVE-2014-2326 CVE-2014-2327 CVE-2014-2328 Package: cacti; Maintainer for cacti is Cacti Maintainer <pkg-cacti-maint@listsaliothdebianorg>; Source for cacti is src:cacti (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Thu, 27 Mar 2014 07:03:01 UTC ...

source: wwwsecurityfocuscom/bid/42575/info Cacti is prone to cross-site-scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the ...

CWE-79 https://rhn.redhat.com/errata/RHSA-2010-0635.html http://cacti.net/release_notes_0_8_7g.php http://marc.info/?l=oss-security&m=127978954522586&w=2 http://svn.cacti.net/viewvc/cacti/branches/0.8.7/utilities.php?r1=6025&r2=6024&pathrev=6025 http://svn.cacti.net/viewvc?view=rev&revision=6025 https://bugzilla.redhat.com/show_bug.cgi?id=459105 http://www.securityfocus.com/bid/42575 http://marc.info/?l=oss-security&m=128017203704299&w=2 http://secunia.com/advisories/41041 http://www.mandriva.com/security/advisories?name=MDVSA-2010:160 http://www.vupen.com/english/advisories/2010/2132 https://exchange.xforce.ibmcloud.com/vulnerabilities/61226 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742768 https://nvd.nist.gov https://www.exploit-db.com/exploits/34504/

CVE-2010-2544

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect