CVE-2013-7071: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the handlerequest function in lib/HTTPServer.pm in Monitorix before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...

CVE-2013-7070: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The handlerequest function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the URI...