Published: 29/08/2013 Updated: 30/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and previous versions allow remote malicious users to inject arbitrary web script or HTML via (1) the step parameter to install/index.php or (2) the id parameter to cacti/host.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cacti cacti 0.8.8
cacti cacti 0.8
cacti cacti 0.8.1
cacti cacti 0.8.2
cacti cacti 0.8.6g
cacti cacti 0.8.6h
cacti cacti 0.8.6i
cacti cacti 0.8.6j
cacti cacti 0.8.5a
cacti cacti 0.8.6
cacti cacti 0.8.6a
cacti cacti 0.8.6b
cacti cacti 0.8.7c
cacti cacti 0.8.7d
cacti cacti 0.8.7e
cacti cacti 0.8.7f
cacti cacti 0.8.7g
cacti cacti
cacti cacti 0.8.2a
cacti cacti 0.8.3a
cacti cacti 0.8.5
cacti cacti 0.8.6c
cacti cacti 0.8.6e
cacti cacti 0.8.7
cacti cacti 0.8.7b
cacti cacti 0.8.7i
cacti cacti 0.8.3
cacti cacti 0.8.4
cacti cacti 0.8.6d
cacti cacti 0.8.6f
cacti cacti 0.8.6k
cacti cacti 0.8.7a
cacti cacti 0.8.7h
cacti cacti 0.8.8a
opensuse opensuse 13.2
opensuse opensuse 13.1

Debian Bug report logs - #742768 cacti: CVE-2014-2326 CVE-2014-2327 CVE-2014-2328 Package: cacti; Maintainer for cacti is Cacti Maintainer <pkg-cacti-maint@listsaliothdebianorg>; Source for cacti is src:cacti (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@inutilorg> Date: Thu, 27 Mar 2014 07:03:01 UTC ...

Two vulnerabilities were discovered in Cacti, a web interface for graphing of monitoring systems: CVE-2013-5588 install/indexphp and cacti/hostphp suffered from Cross-Site Scripting vulnerabilities CVE-2013-5589 cacti/hostphp contained an SQL injection vulnerability, allowing an attacker to execute SQL code on the database used ...

Various cross-site scripting (XSS) flaws (CVE-2013-5588, CVE-2014-5025, CVE-2014-5026) and various SQL injection flaws (CVE-2013-5589, CVE-2015-4342, CVE-2015-4634, CVE-2015-8377, CVE-2015-8604) were discovered affecting versions of Cacti prior to 088g Cross-site scripting (XSS) vulnerability in Cacti before 088d allows remote attackers to inj ...

CWE-79 http://bugs.cacti.net/view.php?id=2383 http://www.debian.org/security/2013/dsa-2747 http://secunia.com/advisories/54652 http://lists.opensuse.org/opensuse-updates/2015-03/msg00034.html http://www.securityfocus.com/bid/62001 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742768 https://nvd.nist.gov https://www.debian.org/security/./dsa-2747

CVE-2013-5588

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect