FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

cacti -- Cross Site Scripting issue

Affected packages
cacti < 1.1.26

Details

VuXML ID e1cb9dc9-daa9-44db-adde-e94d900e2f7f
Discovery 2017-10-10
Entry 2017-10-19

cacti developers report:

The file include/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.

[source]

References

CVE Name CVE-2017-15194
URL http://www.securitytracker.com/id/1039569
URL https://github.com/Cacti/cacti/commit/93f661d8adcfa6618b11522cdab30e97bada33fd
URL https://github.com/Cacti/cacti/issues/1010

Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright information.