CVE-2010-2544

Description

Cross-site scripting (XSS) vulnerability in utilities.php in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allows remote attackers to inject arbitrary web script or HTML via the filter parameter.

References

https://rhn.redhat.com/errata/RHSA-2010-0635.html

https://exchange.xforce.ibmcloud.com/vulnerabilities/61226

https://bugzilla.redhat.com/show_bug.cgi?id=459105

http://www.vupen.com/english/advisories/2010/2132

http://www.mandriva.com/security/advisories?name=MDVSA-2010:160

http://svn.cacti.net/viewvc?view=rev&revision=6025

http://svn.cacti.net/viewvc/cacti/branches/0.8.7/utilities.php?r1=6025&r2=6024&pathrev=6025

http://secunia.com/advisories/41041

http://marc.info/?l=oss-security&m=128017203704299&w=2

http://marc.info/?l=oss-security&m=127978954522586&w=2

http://cacti.net/release_notes_0_8_7g.php

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3