SuSE 10 Security Update : nagios (ZYPP Patch Number 7625)

This update fixes and issue where statusmap.cgi was prone to a cross-site scripting XSS vulnerability. CVE-2011-1523 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

SuSE 10 Security Update : nagios (ZYPP Patch Number 7624)

The following bug has been fixed : - statusmap.cgi was prone to a cross-site scripting XSS vulnerability. CVE-2011-1523 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2011-1523

Cross-site scripting XSS vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter...

CVE-2011-1523

CVE-2011-1523 is an XSS flaw in Nagios, affecting statusmap.cgi in Nagios 3.2.3 and earlier via the layer parameter. Connected advisories confirm fixes in various distributions (e.g., Fedora update FEDORA-2012-1592 and SUSE/openSUSE advisories; openSUSE-NAGIOS-4.4.6-2.5). Affected component: stat...

CVE-2011-1523

Cross-site scripting XSS vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter...

CVE-2011-1523

Removed by vendor...

CVE-2011-1523: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter...

UBUNTU-CVE-2011-1523

Cross-site scripting XSS vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter...

PT-2011-3189

Name of the Vulnerable Software and Affected Versions Nagios versions 3.2.3 and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the layer parameter in the statusmap.cgi script. Recommendations For Nagios versions...