CVE-2014-5464

CVE-2014-5464 describes an XSS vulnerability in the ntopng/ndpi stack where the HTTP Host header is not sanitized in the web frontend. The issue occurs in ntopng (aka ntop) before version 1.2.1, due to untrusted Host header data being injected into the UI, enabling remote attackers to inject arbi...

PT-2014-6492

Name of the Vulnerable Software and Affected Versions ntopng aka ntop versions prior to 1.2.1 Description A cross-site scripting XSS issue exists in the nDPI traffic classification library of ntopng, allowing remote attackers to inject arbitrary web script or HTML via the HTTP Host header...