CVE-2012-0790
EPSS 0.48%smokeping - cross-site scripting vulnerability
發布日:2012/1/24修改日:2026/4/28
也稱為:DEBIAN-CVE-2012-0790
描述
Cross-site scripting (XSS) vulnerability in smokeping_cgi in Smokeping 2.4.2, 2.6.6, and other versions before 2.6.7 allows remote attackers to inject arbitrary web script or HTML via the displaymode parameter.
受影響套件(2)
- Debian/smokepingfrom 0, < 2.6.8-2
- Debian/smokepingfrom 0, < 2.3.6-5+squeeze1