PT-2011-5010

Name of the Vulnerable Software and Affected Versions Zabbix versions prior to 1.8.10 Description The issue allows remote attackers to inject arbitrary web script or HTML via specific parameters to various PHP files, including hostgroups.php, usergrps.php, hosts.php, scripts.php, and...

CVE-2011-4615: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Zabbix before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the gname parameter aka host groups name to 1 hostgroups.php and 2 usergrps.php, the update action to 3 hosts.php and 4 scripts.php, and 5 maintenance.php...