Cross-site scripting (XSS) vulnerability in smokeping_cgi in Smokeping 2.4.2, 2.6.6, and other versions before 2.6.7 allows remote attackers to inject arbitrary web script or HTML via the displaymode parameter.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:35
Type | Values Removed | Values Added |
---|---|---|
References | () http://holisticinfosec.org/content/view/188/45/ - | |
References | () http://oss.oetiker.ch/smokeping/pub/CHANGES - | |
References | () http://secunia.com/advisories/47678 - Vendor Advisory | |
References | () http://www.openwall.com/lists/oss-security/2012/01/21/1 - | |
References | () http://www.securityfocus.com/bid/51584 - | |
References | () https://bugs.gentoo.org/show_bug.cgi?id=399553 - | |
References | () https://bugzilla.redhat.com/show_bug.cgi?id=783584 - Patch |
Information
Published : 2012-01-24 18:55
Updated : 2025-04-11 00:51
NVD link : CVE-2012-0790
Mitre link : CVE-2012-0790
CVE.ORG link : CVE-2012-0790
JSON object : View
Products Affected
oetiker
- smokeping
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')