CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

osv_cve•added 2018/04/12 4:29 p.m.•30 views

CVE-2018-10059

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

5.4CVSS5.4AI score

SaveExploits0References3

NVD•added 2018/04/12 4:29 p.m.•35 views

CVE-2018-10059

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

5.4CVSS5.2AI score0.01094EPSS

SaveExploits1References3

Mend•added 2018/04/12 4:00 p.m.•6 views

CVE-2018-10059

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

5.4CVSS0.01094EPSS

SaveExploits1References4

Cvelist•added 2018/04/12 4:00 p.m.•48 views

CVE-2018-10059

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

5.2AI score0.01094EPSS

SaveExploits1References3

Debian CVE•added 2018/04/12 4:00 p.m.•56 views

CVE-2018-10059

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

5.4CVSS5.3AI score0.01094EPSS

SaveExploits1

Rapid7 Vulnerability Database (full)•added 2018/04/12 12:00 a.m.•6 views

CVE-2018-10059: Improper Neutralization of Input During Web Page Generation

Cacti before 1.1.37 has XSS because the getcurrentpage function in lib/functions.php relies on $SERVER'PHPSELF' instead of $SERVER'SCRIPTNAME' to determine a page name...

5.4CVSS5.9AI score0.01094EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by