CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

OSV•added 2018/04/12 4:29 p.m.•28 views

CVE-2018-10059

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

5.4CVSS5.4AI score

SaveExploits0References3

NVD•added 2018/04/12 4:29 p.m.•32 views

CVE-2018-10059

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

5.4CVSS5.2AI score0.01094EPSS

SaveExploits1References3

Cvelist•added 2018/04/12 4:00 p.m.•43 views

CVE-2018-10059

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

5.2AI score0.01094EPSS

SaveExploits1References3

Debian CVE•added 2018/04/12 4:00 p.m.•54 views

CVE-2018-10059

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

5.4CVSS5.3AI score0.01094EPSS

SaveExploits1

Rapid7 Vulnerability Database (full)•added 2018/04/12 12:00 a.m.•2 views

CVE-2018-10059: Improper Neutralization of Input During Web Page Generation

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

5.4CVSS5.9AI score0.01094EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by