NVD

Id
51185  
Name
CVE-2009-4032  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7e allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) graph.php, (2) include/top_graph_header.php, (3) lib/html_form.php, and (4) lib/timespan_settings.php, as demonstrated by the (a) graph_end or (b) graph_start parameters to graph.php; (c) the date1 parameter in a tree action to graph_view.php; and the (d) page_refresh and (e) default_dual_pane_width parameters to graph_settings.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-11-29  
Modified Date
2016-12-27  
Seq
2009-4032  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
259665 51185 CVE-2009-4032 20091125 Cacti 0.8.7e: Multiple security issues  View
259666 51185 CVE-2009-4032 http://bugs.gentoo.org/show_bug.cgi?id=294573  View
259667 51185 CVE-2009-4032 http://docs.cacti.net/#cross-site_scripting_fixes  View
259668 51185 CVE-2009-4032 JVN#09758120  View
259669 51185 CVE-2009-4032 JVNDB-2009-003901  View
259670 51185 CVE-2009-4032 http://www.cacti.net/download_patches.php  View
259671 51185 CVE-2009-4032 http://www.cacti.net/downloads/patches/0.8.7e/cross_site_fix.patch  View
259672 51185 CVE-2009-4032 [oss-security] 20091125 CVE Request - Cacti - 0.8.7e  View
259673 51185 CVE-2009-4032 [oss-security] 20091125 Re: CVE Request - Cacti - 0.8.7e  View
259674 51185 CVE-2009-4032 [oss-security] 20091126 Re: CVE Request - Cacti - 0.8.7e  View
259675 51185 CVE-2009-4032 [oss-security] 20091130 Re: CVE Request - Cacti - 0.8.7e  View
259676 51185 CVE-2009-4032 20091126 Cacti 0.8.7e: Multiple security issues  View
259677 51185 CVE-2009-4032 37109  View
259678 51185 CVE-2009-4032 ADV-2009-3325  View
259679 51185 CVE-2009-4032 ADV-2010-2132  View
259680 51185 CVE-2009-4032 cacti-name-xss(54388)  View
259681 51185 CVE-2009-4032 RHSA-2010:0635  View
259682 51185 CVE-2009-4032 FEDORA-2009-12575  View
259683 51185 CVE-2009-4032 FEDORA-2009-12560  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42894 JVNDB-2009-003901 Cacti におけるクロスサイトスクリプティングの脆弱性 Cacti には、以下に関連する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-4032 41463 CVE-2009-4032 51185 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003901.html 2009-06-28 2015-07-09 View