NVD

Id
754  
Name
CVE-2008-0783  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject arbitrary web script or HTML via (1) the view_type parameter to graph.php; (2) the filter parameter to graph_view.php; (3) the action parameter to the draw_navigation_text function in lib/functions.php, reachable through index.php (aka the login page) or data_input.php; or (4) the login_username parameter to index.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-02-14  
Modified Date
2011-09-13  
Seq
2008-0783  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
4742 754 CVE-2008-0783 http://bugs.cacti.net/view.php?id=1245  View
4743 754 CVE-2008-0783 SUSE-SR:2008:005  View
4744 754 CVE-2008-0783 GLSA-200803-18  View
4745 754 CVE-2008-0783 3657  View
4746 754 CVE-2008-0783 http://www.cacti.net/release_notes_0_8_7b.php  View
4747 754 CVE-2008-0783 DSA-1569  View
4748 754 CVE-2008-0783 MDVSA-2008:052  View
4749 754 CVE-2008-0783 20080212 cacti -- Multiple security vulnerabilities have been discovered  View
4750 754 CVE-2008-0783 20080212 Cacti 0.8.7a Multiple Vulnerabilities  View
4751 754 CVE-2008-0783 27749  View
4752 754 CVE-2008-0783 34991  View
4753 754 CVE-2008-0783 1019414  View
4754 754 CVE-2008-0783 ADV-2008-0540  View
4755 754 CVE-2008-0783 cacti-datainput-xss(50575)  View
4756 754 CVE-2008-0783 https://bugzilla.redhat.com/show_bug.cgi?id=432758  View
4757 754 CVE-2008-0783 FEDORA-2008-1699  View
4758 754 CVE-2008-0783 FEDORA-2008-1737  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47417 JVNDB-2008-002727 Cacti におけるクロスサイトスクリプティングの脆弱性 Cacti には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-0783 30896 CVE-2008-0783 754 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002727.html 2008-02-14 2012-06-26 View