CVE

Id
41467  
CVE No.
CVE-2009-4032  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) graph.php, (2) include/top_graph_header.php, (3) lib/html_form.php, and (4) lib/timespan_settings.php, as demonstrated by the (a) graph_end or (b) graph_start parameters to graph.php; (c) the date1 parameter in a tree action to graph_view.php; and the (d) page_refresh and (e) default_dual_pane_width parameters to graph_settings.php.  
Phase
Assigned (20091120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
455682 41467 CVE-2009-4032 BUGTRAQ:20091126 Cacti 0.8.7e: Multiple security issues  View
455683 41467 CVE-2009-4032 URL:http://www.securityfocus.com/archive/1/archive/1/508129/100/0/threaded  View
455684 41467 CVE-2009-4032 FULLDISC:20091125 Cacti 0.8.7e: Multiple security issues  View
455685 41467 CVE-2009-4032 URL:http://archives.neohapsis.com/archives/fulldisclosure/2009-11/0292.html  View
455686 41467 CVE-2009-4032 MLIST:[oss-security] 20091125 CVE Request - Cacti - 0.8.7e  View
455687 41467 CVE-2009-4032 URL:http://www.openwall.com/lists/oss-security/2009/11/25/2  View
455688 41467 CVE-2009-4032 MLIST:[oss-security] 20091125 Re: CVE Request - Cacti - 0.8.7e  View
455689 41467 CVE-2009-4032 URL:http://www.openwall.com/lists/oss-security/2009/11/25/4  View
455690 41467 CVE-2009-4032 MLIST:[oss-security] 20091126 Re: CVE Request - Cacti - 0.8.7e  View
455691 41467 CVE-2009-4032 URL:http://www.openwall.com/lists/oss-security/2009/11/26/1  View
455692 41467 CVE-2009-4032 MLIST:[oss-security] 20091130 Re: CVE Request - Cacti - 0.8.7e  View
455693 41467 CVE-2009-4032 URL:http://www.openwall.com/lists/oss-security/2009/11/30/2  View
455694 41467 CVE-2009-4032 CONFIRM:http://bugs.gentoo.org/show_bug.cgi?id=294573  View
455695 41467 CVE-2009-4032 CONFIRM:http://docs.cacti.net/#cross-site_scripting_fixes  View
455696 41467 CVE-2009-4032 CONFIRM:http://www.cacti.net/download_patches.php  View
455697 41467 CVE-2009-4032 CONFIRM:http://www.cacti.net/downloads/patches/0.8.7e/cross_site_fix.patch  View
455698 41467 CVE-2009-4032 FEDORA:FEDORA-2009-12575  View
455699 41467 CVE-2009-4032 URL:https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01390.html  View
455700 41467 CVE-2009-4032 FEDORA:FEDORA-2009-12560  View
455701 41467 CVE-2009-4032 URL:https://www.redhat.com/archives/fedora-package-announce/2010-January/msg00166.html  View
455702 41467 CVE-2009-4032 REDHAT:RHSA-2010:0635  View
455703 41467 CVE-2009-4032 URL:https://rhn.redhat.com/errata/RHSA-2010-0635.html  View
455704 41467 CVE-2009-4032 JVN:JVN#09758120  View
455705 41467 CVE-2009-4032 URL:http://jvn.jp/en/jp/JVN09758120/index.html  View
455706 41467 CVE-2009-4032 JVNDB:JVNDB-2009-003901  View
455707 41467 CVE-2009-4032 URL:http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003901.html  View
455708 41467 CVE-2009-4032 BID:37109  View
455709 41467 CVE-2009-4032 URL:http://www.securityfocus.com/bid/37109  View
455710 41467 CVE-2009-4032 OSVDB:60483  View
455711 41467 CVE-2009-4032 URL:http://www.osvdb.org/60483  View
455712 41467 CVE-2009-4032 SECUNIA:37481  View
455713 41467 CVE-2009-4032 URL:http://secunia.com/advisories/37481  View
455714 41467 CVE-2009-4032 SECUNIA:37934  View
455715 41467 CVE-2009-4032 URL:http://secunia.com/advisories/37934  View
455716 41467 CVE-2009-4032 SECUNIA:38087  View
455717 41467 CVE-2009-4032 URL:http://secunia.com/advisories/38087  View
455718 41467 CVE-2009-4032 SECUNIA:41041  View
455719 41467 CVE-2009-4032 URL:http://secunia.com/advisories/41041  View
455720 41467 CVE-2009-4032 VUPEN:ADV-2009-3325  View
455721 41467 CVE-2009-4032 URL:http://www.vupen.com/english/advisories/2009/3325  View
455722 41467 CVE-2009-4032 VUPEN:ADV-2010-2132  View
455723 41467 CVE-2009-4032 URL:http://www.vupen.com/english/advisories/2010/2132  View
455724 41467 CVE-2009-4032 XF:cacti-name-xss(54388)  View

Related JVN