Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2011-1523

Cross-site scripting (XSS) vulnerability in statusmap.c in statusmap.cgi in Nagios 3.2.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the layer parameter.

PublishedMay 03, 2011, 19:55

Published Bycve@mitre.org

Affected Versions

No affected versions found.

References

http://openwall.com/lists/oss-security/2011/03/25/3
http://openwall.com/lists/oss-security/2011/03/28/4
http://secunia.com/advisories/43287
http://secunia.com/advisories/44974
http://securityreason.com/securityalert/8241
http://tracker.nagios.org/view.php?id=207
http://www.rul3z.de/advisories/SSCHADV2011-002.txt
http://www.ubuntu.com/usn/USN-1151-1
https://bugzilla.redhat.com/show_bug.cgi?id=690877

Weakness Type

CWE-79

CVSS Metrics

Base Score

4.3

Vector String

AV:N/AC:M/Au:N/C:N/I:P/A:N

Base SeverityUnknown

Version

2.0

Attack Vector (AV)