Lucene search

[email protected]NVD:CVE-2010-2790

HistoryAug 05, 2010 - 1:23 p.m.

CVE-2010-2790

2010-08-0513:23:09

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.004

Percentile

73.6%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in the formatQuery function in frontends/php/include/classes/class.curl.php in Zabbix before 1.8.3rc1 allow remote attackers to inject arbitrary web script or HTML via the (1) filter_set, (2) show_details, (3) filter_rst, or (4) txt_select parameters to the triggers page (tr_status.php). NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

zabbixzabbixRange≤1.8.2

zabbixzabbixMatch1.1

zabbixzabbixMatch1.1beta10

zabbixzabbixMatch1.1beta11

zabbixzabbixMatch1.1beta12

zabbixzabbixMatch1.1beta2

zabbixzabbixMatch1.1beta3

zabbixzabbixMatch1.1beta4

zabbixzabbixMatch1.1beta5

zabbixzabbixMatch1.1beta6

zabbixzabbixMatch1.1beta7

zabbixzabbixMatch1.1beta8

zabbixzabbixMatch1.1beta9

zabbixzabbixMatch1.1.1

zabbixzabbixMatch1.1.2

zabbixzabbixMatch1.1.3

zabbixzabbixMatch1.1.4

zabbixzabbixMatch1.1.5

zabbixzabbixMatch1.1.6

zabbixzabbixMatch1.1.7

zabbixzabbixMatch1.3beta

zabbixzabbixMatch1.3.1beta

zabbixzabbixMatch1.3.2beta

zabbixzabbixMatch1.3.3beta

zabbixzabbixMatch1.3.4beta

zabbixzabbixMatch1.3.5beta

zabbixzabbixMatch1.3.6beta

zabbixzabbixMatch1.3.7beta

zabbixzabbixMatch1.3.8beta

zabbixzabbixMatch1.4.2

zabbixzabbixMatch1.4.3

zabbixzabbixMatch1.4.4

zabbixzabbixMatch1.4.5

zabbixzabbixMatch1.4.6

zabbixzabbixMatch1.5beta

zabbixzabbixMatch1.5.1beta

zabbixzabbixMatch1.5.2beta

zabbixzabbixMatch1.5.3beta

zabbixzabbixMatch1.5.4beta

zabbixzabbixMatch1.6

zabbixzabbixMatch1.6.1

zabbixzabbixMatch1.6.2

zabbixzabbixMatch1.6.3

zabbixzabbixMatch1.6.4

zabbixzabbixMatch1.6.5

zabbixzabbixMatch1.6.6

zabbixzabbixMatch1.6.7

zabbixzabbixMatch1.6.8

zabbixzabbixMatch1.6.9

zabbixzabbixMatch1.7

zabbixzabbixMatch1.7.1

zabbixzabbixMatch1.7.2

zabbixzabbixMatch1.7.3

zabbixzabbixMatch1.7.4

zabbixzabbixMatch1.8

zabbixzabbixMatch1.8.1

VendorProductVersionCPE
zabbixzabbix*cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*
zabbixzabbix1.1cpe:2.3:a:zabbix:zabbix:1.1:*:*:*:*:*:*:*
zabbixzabbix1.1cpe:2.3:a:zabbix:zabbix:1.1:beta10:*:*:*:*:*:*
zabbixzabbix1.1cpe:2.3:a:zabbix:zabbix:1.1:beta11:*:*:*:*:*:*
zabbixzabbix1.1cpe:2.3:a:zabbix:zabbix:1.1:beta12:*:*:*:*:*:*
zabbixzabbix1.1cpe:2.3:a:zabbix:zabbix:1.1:beta2:*:*:*:*:*:*
zabbixzabbix1.1cpe:2.3:a:zabbix:zabbix:1.1:beta3:*:*:*:*:*:*
zabbixzabbix1.1cpe:2.3:a:zabbix:zabbix:1.1:beta4:*:*:*:*:*:*
zabbixzabbix1.1cpe:2.3:a:zabbix:zabbix:1.1:beta5:*:*:*:*:*:*
zabbixzabbix1.1cpe:2.3:a:zabbix:zabbix:1.1:beta6:*:*:*:*:*:*

Vendor	Product	Version	CPE
zabbix	zabbix	*	cpe:2.3:a:zabbix:zabbix::::::::
zabbix	zabbix	1.1	cpe:2.3:a:zabbix:zabbix:1.1:::::::*
zabbix	zabbix	1.1	cpe:2.3:a:zabbix:zabbix:1.1:beta10::::::
zabbix	zabbix	1.1	cpe:2.3:a:zabbix:zabbix:1.1:beta11::::::
zabbix	zabbix	1.1	cpe:2.3:a:zabbix:zabbix:1.1:beta12::::::
zabbix	zabbix	1.1	cpe:2.3:a:zabbix:zabbix:1.1:beta2::::::
zabbix	zabbix	1.1	cpe:2.3:a:zabbix:zabbix:1.1:beta3::::::
zabbix	zabbix	1.1	cpe:2.3:a:zabbix:zabbix:1.1:beta4::::::
zabbix	zabbix	1.1	cpe:2.3:a:zabbix:zabbix:1.1:beta5::::::
zabbix	zabbix	1.1	cpe:2.3:a:zabbix:zabbix:1.1:beta6::::::