CVE

Id
61717  
CVE No.
CVE-2013-1770  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in views_view.php in Ganglia Web 3.5.7 allows remote attackers to inject arbitrary web script or HTML via the view_name parameter.  
Phase
Assigned (20130219)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
617931 61717 CVE-2013-1770 MLIST:[oss-security] 20130221 Re: CVE request: XSS flaws fixed in ganglia  View
617932 61717 CVE-2013-1770 URL:http://www.openwall.com/lists/oss-security/2013/02/21/12  View
617933 61717 CVE-2013-1770 MLIST:[oss-security] 20130226 Re: CVE request: XSS flaws fixed in ganglia  View
617934 61717 CVE-2013-1770 URL:http://www.openwall.com/lists/oss-security/2013/02/26/11  View
617935 61717 CVE-2013-1770 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=892823  View
617936 61717 CVE-2013-1770 CONFIRM:https://github.com/ganglia/ganglia-web/commit/552965f33bf79d41ccbec3f1f26840c8bab54ad6  View
617937 61717 CVE-2013-1770 CONFIRM:https://github.com/ganglia/ganglia-web/issues/160  View
617938 61717 CVE-2013-1770 SECUNIA:52673  View
617939 61717 CVE-2013-1770 URL:http://secunia.com/advisories/52673  View
617940 61717 CVE-2013-1770 XF:ganglia-viewsview-xss(82468)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20179 JVNDB-2013-001754 sudo における時刻に関する制限を回避される脆弱性 sudo には、時刻に関する制限を回避され、再認証が要求されないまま権限が保持される脆弱性が存在します。 CVE-2013-1775 61717 6.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001754.html  View