DEBIAN-CVE-2018-10059

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

UBUNTU-CVE-2018-10059

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

PT-2018-9648

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 1.1.37 Description: The issue arises from the get current page function in lib/functions.php, which relies on $ SERVER'PHP SELF' instead of $ SERVER'SCRIPT NAME' to determine a page name, leading to a cross-site...