PT-2017-10742

Name of the Vulnerable Software and Affected Versions Cacti version 0.8.8b Description The issue concerns Cross-Site scripting XSS vulnerabilities. Remote attackers can inject arbitrary web script or HTML via the parent id parameter to "tree.php" and drp action parameter to "data sources.php"...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cacti before 0.8.7f, as used in Red Hat High Performance Computing HPC Solution and other products, allow remote attackers to inject arbitrary web script or HTML via the 1 hostname or 2 description parameter to host.php, or 3 the hostid paramet...