CVE-2011-1523

Removed by vendor...

UBUNTU-CVE-2011-1523

Cross-site scripting XSS vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter...

CVE-2011-1523

Cross-site scripting XSS vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter...

Nagios <= 3.2.3 'layer' XSS Vulnerability - Active Check

Nagios is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nagios:nagios";...

Re: Cross-Site Scripting vulnerability in Nagios

/ strip and from string / void striphtmlbracketschar buffer register int x; register int y; register int z; ifbuffer==NULL || buffer0=='x0' return; / remove all occurances in string / z=intstrlenbuffer; forx=0,y=0;xz;x++ ifbufferx=='' || bufferx=='' continue; buffery++=bufferx; buffery++='x0';...

Nagios 'layer' Parameter XSS Vulnerabilities

Nagios is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cross-Site Scripting vulnerability in Nagios

Advisory: Cross-Site Scripting vulnerability in Nagios Advisory ID: SSCHADV2011-002 Author: Stefan Schurtz Affected Software: Successfully tested on: nagios-3.2.0 / nagios-3.2.3 Vendor URL: http://www.nagios.org Vendor Status: ID 0000207: Cross-Site Scripting vulnerability in Nagios CVE-ID: -...

Nagios 3.2.0 / 3.2.3 Cross Site Scripting

Advisory: Cross-Site Scripting vulnerability in Nagios Advisory ID: SSCHADV2011-002 Author: Stefan Schurtz Affected Software: Successfully tested on: nagios-3.2.0 / nagios-3.2.3 Vendor URL: http://www.nagios.org Vendor Status: ID 0000207: Cross-Site Scripting vulnerability in Nagios CVE-ID: -...

Mandriva Linux Security Advisory : dhcp (MDVSA-2011:001)

A vulnerability has been found and corrected in dhcp : ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service communications-interrupted state and DHCP client service loss by connecting to a port that is only intende...

Mandriva Update for dhcp MDVSA-2011:001 (dhcp)

Check for the Version of dhcp OpenVAS Vulnerability Test Mandriva Update for dhcp MDVSA-2011:001 dhcp Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Design/Logic Flaw

ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service communications-interrupted state and DHCP client service loss by connecting to a port that is only intended for a failover peer, as demonstrated by a Nagios...

CVE-2010-3616

ISC DHCP server 4.2 before 4.2.0-P2, when configured to use failover partnerships, allows remote attackers to cause a denial of service communications-interrupted state and DHCP client service loss by connecting to a port that is only intended for a failover peer, as demonstrated by a Nagios...

Nagios XI < 2009R1.3B Multiple Unspecified XSS

According to its self-reported version, the version of Nagios XI running on the remote host has multiple cross-site scripting vulnerabilities. Unspecified input to the status and dashboard pages are not properly sanitized. A remote attacker could exploit this by tricking a user into making a...

Nagios XI < 2009R1.3C grab_request_var() Multiple XSS

According to its self-reported version, the Nagios XI installation on the remote host has multiple cross-site scripting vulnerabilities. The 'grabrequestvar' function doesn't properly sanitize user input. This affects input to multiple parameters on the 'admin/users.php' page. A remote attacker...

Nagios XI / Fusion Detection

The web interface for Nagios XI and / or Nagios Fusion was detected on the remote host. These applications are used for enterprise monitoring and alerting. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid49774; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/22";...

Nagios XI 'users.php' Multiple Cross-Site Scripting Vulnerabilities

Nagios XI is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

Nagios XI 'users.php' Multiple XSS Vulnerabilities

Nagios XI is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Nagios XI < 2009R1.3B Multiple XSS Vulnerabilities

Binary data 5668.prm...

Nagios XI < 2009R1.3 multiple vulnerabilities

Nagios XI is prone to multiple vulnerabilities. 1. Nagios XI is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Nagios XI < 2009R1.3 Multiple Vulnerabilities

Nagios XI is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nagios:nagiosxi"; if description...