CVE-2013-6039

🗓️ 09 Dec 2013 16:00:00Reported by certccType

cve🔗 web.nvd.nist.gov👁 126 Views🌐 WEB

Multiple XSS vulnerabilities in NagiosQL 3.2 SP2 allowing remote script injection via txtSearch parameter

Reporter	Title	Published	Views	Family All 8
Check Point Advisories	NagiosQL txtSearch Parameter Cross-Site Scripting (CVE-2013-6039)	3 Feb 201400:00	–	checkpoint_advisories
Cvelist	CVE-2013-6039	9 Dec 201316:00	–	cvelist
EUVD	EUVD-2013-5869	7 Oct 202500:30	–	euvd
NVD	CVE-2013-6039	9 Dec 201316:55	–	nvd
Packet Storm	NagiosQL 3.2.0 SP2 Cross Site Scripting	6 Dec 201300:00	–	packetstorm
Prion	Cross site scripting	9 Dec 201316:55	–	prion
Positive Technologies	PT-2013-5935 · Nagios · Nagiosql	9 Dec 201300:00	–	ptsecurity
CERT	NagiosQL 3.2 Service Pack 2 contains a reflected cross-site scripting vulnerability	5 Dec 201300:00	–	cert

NVD

Node

Source	Link
nagiosql	www.nagiosql.org/forum8/solved-issues/3270-security-hotfix-for-nagiosql-3-2-sp2.html
secunia	www.secunia.com/advisories/55896
kb	www.kb.cert.org/vuls/id/268662
osvdb	www.osvdb.org/100612
archives	www.archives.neohapsis.com/archives/fulldisclosure/2013-12/0031.html
jvn	www.jvn.jp/cert/JVNVU92648323/index.html

Parameter	Position	Path	Description	CWE
txtSearch	request body	nagiosql/admin/hostdependencies.php	Reflected XSS via txtSearch in NagiosQL admin host dependencies page.	CWE-79
txtSearch	request body	nagiosql/admin/hosts.php	Reflected XSS via txtSearch in NagiosQL hosts page.	CWE-79

29 Apr 2026 01:13Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.3

EPSS0.01354