CVE-2011-2179

CVE-2011-2179 is an XSS vulnerability in Nagios (config.cgi) via the expand parameter affecting Nagios 3.2.3 and Icinga

CVE-2011-2477

Removed by vendor...

CVE-2011-2179

Removed by vendor...

CVE-2011-2477

CVE-2011-2477 describes multiple XSS vulnerabilities in config.c/config.cgi in Nagios/Icinga before 1.4.1 when escape_html_tags is disabled. The issue enables remote injection of script/HTML via inputs affecting the web interface (e.g., an expanded parameter or onload behavior in a BODY tag after...

CVE-2011-2477

Multiple cross-site scripting XSS vulnerabilities in config.c in config.cgi in Icinga before 1.4.1, when escapehtmltags is disabled, allow remote attackers to inject arbitrary web script or HTML via a JavaScript expression, as demonstrated by the onload attribute of a BODY element located after a...

CVE-2011-2179: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in config.c in config.cgi in 1 Nagios 3.2.3 and 2 Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an a command action or a b hosts action...

CVE-2011-2477: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in config.c in config.cgi in Icinga before 1.4.1, when escapehtmltags is disabled, allow remote attackers to inject arbitrary web script or HTML via a JavaScript expression, as demonstrated by the onload attribute of a BODY element located after a...

PT-2011-3900

Name of the Vulnerable Software and Affected Versions Icinga versions prior to 1.4.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via a JavaScript expression. This can be achieved by exploiting the onload attribute of a BODY element, for instance, when it i...

UBUNTU-CVE-2011-2179

Multiple cross-site scripting XSS vulnerabilities in config.c in config.cgi in 1 Nagios 3.2.3 and 2 Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an a command action or a b hosts action...

PT-2011-3666

Name of the Vulnerable Software and Affected Versions Nagios version 3.2.3 Icinga versions prior to 1.4.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via the expand parameter. This can be demonstrated through a command action or a hosts action, enabling th...

Icinga 'expand' Parameter XSS Vulnerability

Icinga is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:icinga:icinga";...

Cross-Site Scripting vulnerability in Icinga

Advisory: Cross-Site Scripting vulnerability in Icinga Advisory ID: SSCHADV2011-005 Author: Stefan Schurtz Affected Software: Successfully tested on: icinga-1.3.0 / icinga-1.4.0 Vendor URL: http://www.icinga.org Vendor Status: Resolved CVE-ID: - ========================== Vulnerability Descriptio...

Icinga 1.3.0 / 1.4.0 Cross Site Scripting

Advisory: Cross-Site Scripting vulnerability in Icinga Advisory ID: SSCHADV2011-005 Author: Stefan Schurtz Affected Software: Successfully tested on: icinga-1.3.0 / icinga-1.4.0 Vendor URL: http://www.icinga.org Vendor Status: Resolved CVE-ID: - ========================== Vulnerability Descriptio...

Icinga Multiple Cross-Site Scripting Vulnerabilities

Icinga is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:icinga:icinga";...

Cross-Site Scripting vulnerabilities in Icinga

Advisory: Cross-Site Scripting vulnerabilities in Icinga Advisory ID: SSCHADV2011-001 Author: Stefan Schurtz Affected Software: Successfully tested on: icinga-1.3.0 / icinga-1.2.1 Vendor URL: http://www.icinga.org Vendor Status: fixed csv export link to make it XSS save IE 1275 CVE-ID: -...

Icinga 1.3.0 / 1.2.1 Cross Site Scripting

Advisory: Cross-Site Scripting vulnerabilities in Icinga Advisory ID: SSCHADV2011-001 Author: Stefan Schurtz Affected Software: Successfully tested on: icinga-1.3.0 / icinga-1.2.1 Vendor URL: http://www.icinga.org Vendor Status: fixed csv export link to make it XSS save IE 1275 CVE-ID: -...