71 matches found
CVE-2013-7070
The handlerequest function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the URI...
CVE-2013-7071
Cross-site scripting XSS vulnerability in the handlerequest function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
Cross site scripting
Cross-site scripting XSS vulnerability in the handlerequest function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
Cross site request forgery (csrf)
The handlerequest function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the URI...
CVE-2013-7071
CVE-2013-7071 affects Monitorix prior to 3.4.0. The vulnerability is a Cross-site Scripting (XSS) in the handle_request function of lib/HTTPServer.pm, exploitable via PATH_INFO to inject arbitrary web scripts or HTML. Remediation in the connected data shows Fedora/monitorix updates (e.g., monitor...
CVE-2013-7071
Cross-site scripting XSS vulnerability in the handlerequest function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2013-7071
Cross-site scripting XSS vulnerability in the handlerequest function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2013-7070
The handlerequest function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the URI...
CVE-2013-7070
The handlerequest function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the URI...
CVE-2013-7070
CVE-2013-7070 affects Monitorix prior to version 3.3.1. The handle_request function in lib/HTTPServer.pm allows remote attackers to execute arbitrary commands via shell metacharacters in the URI. Documented impact is remote code execution with high confidentiality, integrity, and availability imp...
CVE-2013-7071: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the handlerequest function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2013-7070: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The handlerequest function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the URI...
PT-2019-7004
Name of the Vulnerable Software and Affected Versions Monitorix versions prior to 3.4.0 Description A cross-site scripting XSS issue exists in the handle request function in lib/HTTPServer.pm, allowing remote attackers to inject arbitrary web script or HTML via the PATH INFO. Recommendations For...
Fedora 28 : monitorix (2018-3b67a68763)
Prior Monitorix versions are vulnerable to cross-site scripting XSS, caused by improper validation of user-supplied input by the monitorix.cgi file. A remote attacker could exploit this vulnerability using some of the arguments provided graph= or when= in a specially crafted URL to execute script...
Monitorix Cross-Site Scripting Vulnerability
Monitorix is a set of free tools for monitoring system status. The tool supports customization of monitoring settings and analyzes CPU and memory usage, disk access usage, network usage, and more. A cross-site scripting vulnerability exists in versions of Monitorix prior to 3.10.1. The...
Cross site scripting
Monitorix before 3.10.1 allows XSS via CGI variables...
CVE-2018-7649
Monitorix before 3.10.1 allows XSS via CGI variables...
CVE-2018-7649
Monitorix before 3.10.1 allows XSS via CGI variables...
CVE-2018-7649
Monitorix before 3.10.1 allows XSS via CGI variables...
CVE-2018-7649
CVE-2018-7649 affects Monitorix prior to 3.10.1 and enables cross-site scripting via CGI variables. The vulnerability allows an attacker to inject arbitrary web script or HTML in the affected web interface. The public documents consistently describe the issue as an XSS in Monitorix before version...