CVE-2013-5588
EPSS 0.33%cacti - several
發布日:2013/8/29修改日:2026/5/27
也稱為:DEBIAN-CVE-2013-5588
描述
Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.8b and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the step parameter to install/index.php or (2) the id parameter to cacti/host.php.
受影響套件(2)
- Debian/cactifrom 0, < 0.8.8b+dfsg-3
- Debian/cactifrom 0, < 0.8.7g-1+squeeze3