CVE-2015-0859

The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokepingcgi, which allows remote attackers to execute arbitrary code via crafted CGI arguments...

CVE-2015-0859: Undefined Security Weakness

The Debian build procedure for the smokeping package in wheezy before 2.6.8-2+deb7u1 and jessie before 2.6.9-1+deb8u1 does not properly configure the way Apache httpd passes arguments to smokepingcgi, which allows remote attackers to execute arbitrary code via crafted CGI arguments...

SmokePing smokeping_cgi Arbitrary Code Execution Vulnerability

mokePing is the delayed logging, graphing and alarming system. smokepingcgi in Apache httpd modcgi fails to properly handle user-submitted parameters, allowing remote attackers to execute arbitrary code in an application context via a constructed HTTP request...

CVE-2012-0790

Cross-site scripting XSS vulnerability in smokepingcgi in Smokeping 2.4.2, 2.6.6, and other versions before 2.6.7 allows remote attackers to inject arbitrary web script or HTML via the displaymode parameter...

CVE-2012-0790: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in smokepingcgi in Smokeping 2.4.2, 2.6.6, and other versions before 2.6.7 allows remote attackers to inject arbitrary web script or HTML via the displaymode parameter...