CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
Confidence
High
EPSS
Percentile
72.7%
Cross-site scripting (XSS) vulnerability in share/pnp/application/views/kohana_error_page.php in PNP4Nagios before 0.6.22 allows remote attackers to inject arbitrary web script or HTML via a parameter that is not properly handled in an error message.
Vendor | Product | Version | CPE |
---|---|---|---|
op5 | monitor | 6.3.0 | cpe:2.3:a:op5:monitor:6.3.0:*:*:*:*:*:*:* |
pnp4nagios | pnp4nagios | * | cpe:2.3:a:pnp4nagios:pnp4nagios:*:*:*:*:*:*:*:* |
pnp4nagios | pnp4nagios | 0.6.0 | cpe:2.3:a:pnp4nagios:pnp4nagios:0.6.0:*:*:*:*:*:*:* |
pnp4nagios | pnp4nagios | 0.6.1 | cpe:2.3:a:pnp4nagios:pnp4nagios:0.6.1:*:*:*:*:*:*:* |
pnp4nagios | pnp4nagios | 0.6.2 | cpe:2.3:a:pnp4nagios:pnp4nagios:0.6.2:*:*:*:*:*:*:* |
pnp4nagios | pnp4nagios | 0.6.3 | cpe:2.3:a:pnp4nagios:pnp4nagios:0.6.3:*:*:*:*:*:*:* |
pnp4nagios | pnp4nagios | 0.6.4 | cpe:2.3:a:pnp4nagios:pnp4nagios:0.6.4:*:*:*:*:*:*:* |
pnp4nagios | pnp4nagios | 0.6.5 | cpe:2.3:a:pnp4nagios:pnp4nagios:0.6.5:*:*:*:*:*:*:* |
pnp4nagios | pnp4nagios | 0.6.6 | cpe:2.3:a:pnp4nagios:pnp4nagios:0.6.6:*:*:*:*:*:*:* |
pnp4nagios | pnp4nagios | 0.6.7 | cpe:2.3:a:pnp4nagios:pnp4nagios:0.6.7:*:*:*:*:*:*:* |
docs.pnp4nagios.org/pnp-0.6/dwnld
openwall.com/lists/oss-security/2014/07/11/3
secunia.com/advisories/59535
secunia.com/advisories/59603
sourceforge.net/p/pnp4nagios/code/ci/f846a6c9d007ca2bee05359af747619151195fc9
www.op5.com/blog/news/op5-monitor-6-3-1-release-notes
www.securityfocus.com/bid/68350
bugs.op5.com/view.php?id=8761