CVE - CVE-2010-2545

CVE-ID
CVE-2010-2545	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple cross-site scripting (XSS) vulnerabilities in Cacti before 0.8.7g, as used in Red Hat High Performance Computing (HPC) Solution and other products, allow remote attackers to inject arbitrary web script or HTML via (1) the name element in an XML template to templates_import.php; and allow remote authenticated administrators to inject arbitrary web script or HTML via vectors related to (2) cdef.php, (3) data_input.php, (4) data_queries.php, (5) data_sources.php, (6) data_templates.php, (7) gprint_presets.php, (8) graph.php, (9) graphs_new.php, (10) graphs.php, (11) graph_templates_inputs.php, (12) graph_templates_items.php, (13) graph_templates.php, (14) graph_view.php, (15) host.php, (16) host_templates.php, (17) lib/functions.php, (18) lib/html_form.php, (19) lib/html_form_template.php, (20) lib/html.php, (21) lib/html_tree.php, (22) lib/rrd.php, (23) rra.php, (24) tree.php, and (25) user_admin.php.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:41041 URL:http://secunia.com/advisories/41041 MISC:42575 URL:http://www.securityfocus.com/bid/42575 MISC:ADV-2010-2132 URL:~~http://www.vupen.com/english/advisories/2010/2132~~ (Obsolete source) MISC:MDVSA-2010:160 URL:~~http://www.mandriva.com/security/advisories?name=MDVSA-2010:160~~ (Obsolete source) MISC:RHSA-2010:0635 URL:https://rhn.redhat.com/errata/RHSA-2010-0635.html MISC:[oss-security] 20100722 Cacti XSS fixes in 0.8.7g URL:http://marc.info/?l=oss-security&m=127978954522586&w=2 MISC:[oss-security] 20100726 Re: Cacti XSS fixes in 0.8.7g URL:http://marc.info/?l=oss-security&m=128017203704299&w=2 MISC:cacti-templatesimport-xss(61227) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/61227 MISC:http://cacti.net/release_notes_0_8_7g.php URL:http://cacti.net/release_notes_0_8_7g.php MISC:http://svn.cacti.net/viewvc?view=rev&revision=6037 URL:http://svn.cacti.net/viewvc?view=rev&revision=6037 MISC:http://svn.cacti.net/viewvc?view=rev&revision=6038 URL:http://svn.cacti.net/viewvc?view=rev&revision=6038 MISC:http://svn.cacti.net/viewvc?view=rev&revision=6041 URL:http://svn.cacti.net/viewvc?view=rev&revision=6041 MISC:http://svn.cacti.net/viewvc?view=rev&revision=6042 URL:http://svn.cacti.net/viewvc?view=rev&revision=6042 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=459229 URL:https://bugzilla.redhat.com/show_bug.cgi?id=459229
Assigning CNA
Red Hat, Inc.
Date Record Created
20100630	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20100630)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)