108 matches found
Design/Logic Flaw
smokeping before 2.6.9 has XSS incomplete fix for CVE-2012-0790...
CVE-2013-4158
smokeping before 2.6.9 has XSS incomplete fix for CVE-2012-0790...
UBUNTU-CVE-2013-4158
smokeping before 2.6.9 has XSS incomplete fix for CVE-2012-0790...
CVE-2013-4158
smokeping before 2.6.9 has XSS incomplete fix for CVE-2012-0790...
CVE-2013-4158
CVE-2013-4158 affects Smokeping prior to 2.6.9 . Root cause: XSS in the web interface (incomplete fix for CVE-2012-0790). Impact: potential for client-side code execution via the web UI. Affected products/versions are documented in multiple sources; remediation : upgrade to Smokeping 2.6.9 or new...
CVE-2013-4158
smokeping before 2.6.9 has XSS incomplete fix for CVE-2012-0790...
CVE-2013-4168
Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...
CVE-2013-4168
Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...
DEBIAN-CVE-2013-4168
Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...
CVE-2013-4168
Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...
Cross site scripting
Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...
UBUNTU-CVE-2013-4168
Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...
CVE-2013-4168
Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...
CVE-2013-4168
CVE-2013-4168 is a documented cross-site scripting (XSS) vulnerability in SmokePing 2.6.9, specifically affecting the start and end time fields. The issue is described as XSS in these input fields, with CVSS scores provided (NVD CVSSv2 base 4.3, CVSSv3.1 base 6.1) indicating a network-based entry...
CVE-2013-4168
Cross-site scripting XSS vulnerability in SmokePing 2.6.9 in the start and end time fields...
CVE-2015-0859
The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokepingcgi, which allows remote attackers to execute arbitrary code via crafted CGI arguments...
Code injection
The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokepingcgi, which allows remote attackers to execute arbitrary code via crafted CGI arguments...
CVE-2015-0859
The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokepingcgi, which allows remote attackers to execute arbitrary code via crafted CGI arguments...
DEBIAN-CVE-2015-0859
The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokepingcgi, which allows remote attackers to execute arbitrary code via crafted CGI arguments...
CVE-2015-0859
The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokepingcgi, which allows remote attackers to execute arbitrary code via crafted CGI arguments...