CVE-2012-0790

EPSS 0.48%

smokeping - cross-site scripting vulnerability

Published: 1/24/2012Modified: 4/28/2026

Also known as:DEBIAN-CVE-2012-0790

Description

Cross-site scripting (XSS) vulnerability in smokeping_cgi in Smokeping 2.4.2, 2.6.6, and other versions before 2.6.7 allows remote attackers to inject arbitrary web script or HTML via the displaymode parameter.

Affected packages (2)

Debian/smokepingfrom 0, < 2.6.8-2
Debian/smokepingfrom 0, < 2.3.6-5+squeeze1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2012-0790