Cacti 跨站脚本漏洞

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool uses snmpget to obtain data, uses RRDtool to draw graphs for analysis, and provides data and user management features. cross-site scripting vulnerability exists in Cacti, which stems from the...

Cross-site Scripting (XSS) - Stored in cacti/cacti

Description Hi there cacti maintainer team, I would like to report a stored XSS in cacti source code. It is due to unsanitized error message in synchronizing aggregates for color. Proof of Concept 1. Install a cacti instance in your local 2. Go to Color and create a color with name 3. Back to col...

Cross-site Scripting (XSS)

cacti:sid is vulnerable to cross-site scripting XSS attacks. Template import for the midwinter theme allows remote attackers to trigger XSS...

Cacti < 1.2.18 XSS Vulnerability - Linux

Cacti is prone to a cross-site scripting XSS vulnerability via template import for the midwinter theme. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Cacti < 1.2.18 XSS Vulnerability - Windows

Cacti is prone to a cross-site scripting XSS vulnerability via template import for the midwinter theme. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2020-14424

Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme...

CVE-2020-14424

Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme...

CVE-2020-14424

Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme...

DEBIAN-CVE-2020-14424

Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme...

CVE-2020-14424

Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme...

Design/Logic Flaw

Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme...

UBUNTU-CVE-2020-14424

Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme...

CVE-2020-14424

Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme...

CVE-2020-14424

CVE-2020-14424 affects Cacti versions prior to 1.2.18, where an attacker can trigger cross-site scripting via template import for the midwinter theme. Affected software is the Cacti web frontend (PHP-based) used for network graphing. Root cause: improper sanitization during template import allowi...

CVE-2020-14424

Cacti before 1.2.18 allows remote attackers to trigger XSS via template import for the midwinter theme...

Fedora: Security Advisory for cacti-spine (FEDORA-2021-cfc1913b5f)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for cacti-spine (FEDORA-2021-0b8814db99)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for cacti (FEDORA-2021-0b8814db99)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for cacti-spine (FEDORA-2021-818ff2c12b)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for cacti (FEDORA-2021-cfc1913b5f)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...