Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://openwall.com/lists/oss-security/2011/03/25/3 - | |
| References | () http://openwall.com/lists/oss-security/2011/03/28/4 - | |
| References | () http://secunia.com/advisories/43287 - Vendor Advisory | |
| References | () http://secunia.com/advisories/44974 - | |
| References | () http://securityreason.com/securityalert/8241 - | |
| References | () http://tracker.nagios.org/view.php?id=207 - Exploit | |
| References | () http://www.rul3z.de/advisories/SSCHADV2011-002.txt - Exploit | |
| References | () http://www.ubuntu.com/usn/USN-1151-1 - | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=690877 - |
Information
Published : 2011-05-03 19:55
Updated : 2024-11-21 01:26
NVD link : CVE-2011-1523
Mitre link : CVE-2011-1523
CVE.ORG link : CVE-2011-1523
JSON object : View
Products Affected
nagios
- nagios
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')