10 matches found
Fedora 24 : cacti (2017-3db2a34403)
Update to 1.1.12 - Fix Cross-site Scripting XSS issue with link.php CVE-2017-10970 Release notes: https://www.cacti.net/releasenotes.php?version=1.1.11 Release notes: https://www.cacti.net/releasenotes.php?version=1.1.12 Note that Tenable Network Security has extracted the preceding description...
Fedora 26 : cacti (2017-7ab0179693)
Update to 1.1.12 - Fix Cross-site Scripting XSS issue with link.php CVE-2017-10970 Release notes: https://www.cacti.net/releasenotes.php?version=1.1.11 Release notes: https://www.cacti.net/releasenotes.php?version=1.1.12 Note that Tenable Network Security has extracted the preceding description...
Fedora Update for cacti FEDORA-2017-3db2a34403
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for cacti FEDORA-2017-f8e32f160e
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Cacti XSS Vulnerability - Windows
Cross-site scripting XSS vulnerability in link.php in Cacti allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the diehtmlinputerror function in lib/htmlvalidate.php. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be...
CVE-2017-10970
Cross-site scripting XSS vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the diehtmlinputerror function in lib/htmlvalidate.php...
CVE-2017-10970
Cross-site scripting XSS vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the diehtmlinputerror function in lib/htmlvalidate.php...
CVE-2017-10970
CVE-2017-10970 is a documented XSS vulnerability in Cacti 1.1.12 where remote anonymous users could inject script via the id parameter in link.php, related to lib/html_validate.php's die_html_input_error. Connected advisories confirm the issue affects Cacti 1.1.12 and indicate remediation by upgr...
CVE-2017-10970
Cross-site scripting XSS vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the diehtmlinputerror function in lib/htmlvalidate.php...
CVE-2017-10970
Cross-site scripting XSS vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML via the id parameter, related to the diehtmlinputerror function in lib/htmlvalidate.php...