4.3
CVSSv2

CVE-2011-4615

Published: 29/12/2011 Updated: 29/08/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in Zabbix prior to 1.8.10 allow remote malicious users to inject arbitrary web script or HTML via the gname parameter (aka host groups name) to (1) hostgroups.php and (2) usergrps.php, the update action to (3) hosts.php and (4) scripts.php, and (5) maintenance.php.

Vulnerable Product Search on Vulmon Subscribe to Product

zabbix zabbix

zabbix zabbix 1.8.10

zabbix zabbix 1.8.7

zabbix zabbix 1.8.4

zabbix zabbix 1.8.3

zabbix zabbix 1.8.2

zabbix zabbix 1.6.9

zabbix zabbix 1.6.8

zabbix zabbix 1.6.1

zabbix zabbix 1.6

zabbix zabbix 1.4.5

zabbix zabbix 1.4.4

zabbix zabbix 1.3.5

zabbix zabbix 1.3.4

zabbix zabbix 1.1.5

zabbix zabbix 1.1.4

zabbix zabbix 1.1

zabbix zabbix 1.8.9

zabbix zabbix 1.8.8

zabbix zabbix 1.8.6

zabbix zabbix 1.8.5

zabbix zabbix 1.7.4

zabbix zabbix 1.7.3

zabbix zabbix 1.6.5

zabbix zabbix 1.6.4

zabbix zabbix 1.5.2

zabbix zabbix 1.5.1

zabbix zabbix 1.4.1

zabbix zabbix 1.4

zabbix zabbix 1.3.8

zabbix zabbix 1.3.1

zabbix zabbix 1.3

zabbix zabbix 1.1.1

zabbix zabbix 1.7.2

zabbix zabbix 1.7.1

zabbix zabbix 1.7

zabbix zabbix 1.6.3

zabbix zabbix 1.6.2

zabbix zabbix 1.5

zabbix zabbix 1.4.6

zabbix zabbix 1.3.7

zabbix zabbix 1.3.6

zabbix zabbix 1.1.7

zabbix zabbix 1.1.6

zabbix zabbix 1.8.1

zabbix zabbix 1.8

zabbix zabbix 1.6.7

zabbix zabbix 1.6.6

zabbix zabbix 1.5.4

zabbix zabbix 1.5.3

zabbix zabbix 1.4.3

zabbix zabbix 1.4.2

zabbix zabbix 1.3.3

zabbix zabbix 1.3.2

zabbix zabbix 1.1.3

zabbix zabbix 1.1.2

Vendor Advisories

Debian Bug report logs - #652664 CVE-2011-4615 Package: src:zabbix; Maintainer for src:zabbix is Dmitry Smirnov <onlyjob@debianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Mon, 19 Dec 2011 17:18:08 UTC Severity: grave Tags: security Fixed in version zabbix/1:1810-1 Done: Christoph Haas <haas@d ...