PT-2009-6215 · Cacti · Cacti

Name of the Vulnerable Software and Affected Versions: Cacti version 0.8.7e Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The affected areas include graph.php, include/top gra...

Cacti 0.8.7e: Multiple Security Issues

No description provided by source. Moritz Naumann [email protected] cacti: http://www.cacti.net/ ================================================================= Cacti 0.8.7e and earlier versions are affected by multiple security issues. Issues 1-4 are cross site scripting issues, issu...

Cacti 0.8.7e - Multiple Vulnerabilities

Cacti 0.8.7e - Multiple Vulnerabilities Moritz Naumann cacti: http://www.cacti.net/ ================================================================= Cacti 0.8.7e and earlier versions are affected by multiple security issues. Issues 1-4 are cross site scripting issues, issue 5 is a priviledge...

Cacti 0.8.7e: Multiple Security Issues

Exploit for unknown platform in category web applications ====================================== Cacti 0.8.7e: Multiple Security Issues ====================================== cacti: http://www.cacti.net/ ================================================================= Cacti 0.8.7e and earlier...

Cacti 0.8.7e - Multiple Vulnerabilities

Moritz Naumann cacti: http://www.cacti.net/ ================================================================= Cacti 0.8.7e and earlier versions are affected by multiple security issues. Issues 1-4 are cross site scripting issues, issue 5 is a priviledge escalation issue. 1. XSS 1 A HTTP GET reque...

Cacti Multiple HTML Injection Vulnerabilities

Cacti is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal...

Cacti Multiple HTML Injection Vulnerabilities

Cacti is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

FreeBSD : cacti -- XSS issues (04104985-d846-11de-84e4-00215af774f0)

The cacti development team reports : The Cross-Site Scripting patch has been posted. This patch addresses cross-site scripting issues reported by Moritz Naumann. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the...

FreeBSD Ports: cacti

The remote host is missing an update to the system as announced in the referenced advisory. VID 04104985-d846-11de-84e4-00215af774f0 OpenVAS Vulnerability Test $ Description: Auto generated from VID 04104985-d846-11de-84e4-00215af774f0 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

FreeBSD Ports: cacti

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cacti 0.8.x - graph.php Multiple Cross-Site Scripting Vulnerabilities

Cacti 0.8.x - graph.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37109/info Cacti is prone to multiple cross-site-scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically...

cacti -- cross-site scripting issues

The cacti development team reports: The Cross-Site Scripting patch has been posted. This patch addresses cross-site scripting issues reported by Moritz Naumann...

Cacti 0.8.x - 'graph.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37109/info Cacti is prone to multiple cross-site-scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in t...

Cacti graph_view.php Remote Command Execution

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Cacti...

Cacti Multiple Input Validation Vulnerabilities

Cacti is prone to multiple unspecified input-validation vulnerabilities, including: - Multiple cross-site scripting vulnerabilities - Multiple SQL-injection vulnerabilities - An HTTP response-splitting vulnerability. Attackers may exploit these vulnerabilities to influence or misrepresent how web...

Cacti 'data_input.php' Cross Site Scripting Vulnerability

Cacti is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the...

Cacti Detection (HTTP)

HTTP based detection of Cacti. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.100204";...

Cacti < 0.8.7b 'data_input.php' XSS Vulnerability

Cacti is prone to a cross-site scripting XSS vulnerability because the application fails to sufficiently sanitize user-supplied input. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cacti 0.8.7 - data_input.php Cross-Site Scripting

Cacti 0.8.7 - datainput.php Cross-Site Scripting source: https://www.securityfocus.com/bid/34991/info Cacti is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Cacti 0.8.7 - 'data_input.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/34991/info Cacti is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...